Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could change their PIN to 000000 or blank without any issues so we'd like to disable that ability.

I've been googling around and haven't found any way to do this, but perhaps someone has encountered a similar issue and found a resolution? A third party minidriver is the next step, but if we could do it without additional tools I'm all for it.

share|improve this question
1  
I tried looking this up today, alas no documentation exists, as far as I can tell, regarding disabling the self-service PIN change function. I haven't had a chance to check if local machine policies can disallow it's use though. Sorry I couldn't be of more help. –  Brent Pabst Sep 13 '12 at 19:48
    
@BrentPabst Thanks for looking, that's the same conclusion I came to unfortunately. –  bobmagoo Sep 14 '12 at 0:03

1 Answer 1

Try following Steps :

  • Goto Run
  • Type "services.msc"
  • Search for "Smart Card" and double click on it.
  • If service Status is Started then Stop it & set Startup type to Disable.
  • Click on Apply & OK.

Hope this help you..

share|improve this answer
2  
So the solution to a problem is simply to disable ALL of the functionality. c'mon. -1 –  Brent Pabst Sep 11 '12 at 16:06
    
Yeah, that's a bad idea. I need to maintain smartcard functionality but disable PIN change. –  bobmagoo Sep 11 '12 at 16:54

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.