Re: Start a service instance for each Terminal Service session

Services are computer specific NOT user specific therefore you cannot have a
windows service run separately for each instance.

I am not sure if Win2k3 supports Smartcard auth, I'll have to look that up
but I know Presentation Server does so you may want to look into that.

Jeff Pitsch
Microsoft MVP - Terminal Server

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

"Erik B" <erik.bostrom@xxxxxxxxxxxx> wrote in message
news:1145479803.726487.211080@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello!

I would like to know how to start a service instance for every Terminal
Service session. The instances also need to run in the session's
context. The background is that the service need to access remote smart
cards located on the client. The service is running as LOCAL_SYSTEM.
The service access the smart cards through the resource manager and the
SCard interface.

In Windows XP it seems almost OK without modification. There the
service can list the remote smart card reader with SCardListReaders()
but only after the user has logged in to the system. And then it's too
late since I want to use the smart card for authentication on the
server...

In Windows Server 2003 the service can't access the remote readers and
smart cards at all. I suppose this is because the service is running in
the Console Session with session ID 0.

Hopefully, a service instance for each session would make it possible
to access the smart cards at login time.

Thanks for any help.

Erik



.

Relevant Pages

  • Start a service instance for each Terminal Service session
    ... I would like to know how to start a service instance for every Terminal ... The service access the smart cards through the resource manager and the ... service can list the remote smart card reader with SCardListReaders ... the Console Session with session ID 0. ...
    (microsoft.public.windows.terminal_services)
  • Re: Help in implementing a PKI/Smart Card Infrastrucutre
    ... So your problem is actually buying the hardware (smart cards) and the ... software (Windows CSP)? ... I only use Enterprise Servers in my small business ...
    (microsoft.public.windows.server.security)
  • Re: GINA for Smart Card logon
    ... Are you trying to control what happens when people remove their smart cards after logging on? ... you do know the GINA is gone in Windows Vista/Server 2008, ... > computer may stop at the winlogon desktop and the default desktop may> be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Use
    ... Windows 2000 and later have built in support for Smart Cards. ... To use smart cards you have to set up (or use someone's PKI infrasturcture). ...
    (microsoft.public.security)
  • Offline Smart Card Logon
    ... It's possible to logon to windows xp via smart cards even there's no network ... Is it still possible to logon offline via smart cards when the CRL has ...
    (microsoft.public.windows.server.security)