Duplicate of the following question at superuser. I think this would be a better place for it.
Is it possible to implement Biometrics as a form of login with Active Directory in a Windows Server 2008 R2 set-up with Win7 clients. That is, not just locally stored biometric credentials - at a central point.
I.e. a user roams freely among computers on the domain and simply 'swipes' to login.
If so can your answer in include possible techniques and technologies to do so. We'd like to minimise the use of niche third-party software please.
Update: From further research it appears it's not possible. However I've read that you can
store fingerprint templates on smart cards. Does anyone have information on this? Providing the user with a smart card that holds the biometric data would be quite useful. They may indeed already have a certificate for authentication, however allowing to check fingerprint as well would be very useful. Definitely an option for people wanting to store biometric data away from local computers.