up vote 0 down vote favorite
share [g+] share [fb]

Duplicate of the following question at superuser. I think this would be a better place for it.

Is it possible to implement Biometrics as a form of login with Active Directory in a Windows Server 2008 R2 set-up with Win7 clients. That is, not just locally stored biometric credentials - at a central point.

I.e. a user roams freely among computers on the domain and simply 'swipes' to login.

If so can your answer in include possible techniques and technologies to do so. We'd like to minimise the use of niche third-party software please.

Update: From further research it appears it's not possible. However I've read that you can store fingerprint templates on smart cards. Does anyone have information on this? Providing the user with a smart card that holds the biometric data would be quite useful. They may indeed already have a certificate for authentication, however allowing to check fingerprint as well would be very useful. Definitely an option for people wanting to store biometric data away from local computers.

link|improve this question
similar question on IT Security here – Paul Ackerman Dec 6 '11 at 14:56
2  
possible duplicate of Biometeric authentication with Active Directory. TL/DR: No. – Chris S♦ Dec 6 '11 at 15:23
Think that covers a lot of it actually. Thanks for that, Chris. However check update. – user26753 Dec 6 '11 at 16:47
Biometric smartcards are one implementation of Tri-Factor authentication (which lives in the realm of Mega-Corps and Government workers; Are: Fingerprint, Have: Smart Card, Know: PIN/Password). You'll have a very hard time finding a reasonably priced solution, though such things do exist. – Chris S♦ Dec 6 '11 at 17:31
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.