none
Problem with the smart card logon on Windows 7

    Question

  • Dear Experts

     

    We have 2 DC on my local network (Windows 2008 Standard SP2 + Windows 2000 SP4) but the Microsoft Certificate authority is installed on one Windows 2003 Server and issued the certificate for the users for the SMART CARD LOGON which are registered on the Smart card device.

    Also, we have about 20 pc's client, many with  Windows XP and someones with Windows 7 on the same network without any problems.

    We get the following error when i try to login with SMART CARD (ETOKEN) from only one laptop with Windows 7 Professional (32 bits)

    THE SYSTEM COULD NOT LOG YOU ON. YOUR CREDENTIALS COULD NOT BE VERIFIED

    All the rest computers logon succefully on the domain doing the same process. I've checked all that I could following the proposed links in this forum for a similar problem without success.

     

    http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/e82b9d37-896a-4a30-ac7c-623195747fbe?prof=required

     

    Please, can you help us?

     

    Thank you very much,

    Miquel Angel

    Tuesday, April 26, 2011 8:48 AM

All replies

  • On Tue, 26 Apr 2011 08:48:08 +0000, mavg85 wrote:

    THE SYSTEM COULD NOT LOG YOU ON. YOUR CREDENTIALS COULD NOT BE VERIFIED

    All the rest computers logon succefully on the domain doing the same process. I've checked all that I could following the proposed links in this forum for a similar problem without success.

    There should be events in the Event Log that provide more detail on what
    the problem is.


    Paul Adare
    MVP - Identity Lifecycle Manager
    http://www.identit.ca
    Congratulations!  You are the one-millionth user to log into our system.

    Thursday, April 28, 2011 9:10 AM
  • Hi Paul,

    Thanks for your answer. I have verified the Event Log between the computer with the problem described and another one that works ok on SMART CARD LOGON. Both are Windows 7 Proffesional OS. I have not detected any difference.

    I read the link "You cannot use a smart card certificate to log on to a domain from a Windows Vista-based or a Windows Server 2008-based client computer":

    http://support.microsoft.com/kb/955558/  


    I don't known, but seems as if laptop with the problem are looking and not find EKU in the certificate.

    ¿Are there any way to check this?

     

    Thank you very much,

    Miquel Angel

     

     

    Thursday, April 28, 2011 4:16 PM