I'm looking for a way to use smart cards to lock and unlock windows workstations used by shared user accounts.
1) We want to lock/unlock the shared user account with each user's personal staff card.
2) in specific areas we want to lock the workstation, but let the screen still showing the active session/programs. It should be as if only the keyboard and mouse don't work while the card is not in the card reader.
Normally we can have a policy locking the account when the card is removed from its reader. However, in this case we have several groups of people sharing a single login to access various resources. We want a single user to be able to unlock several different shared user accounts. Let's say an engineer or supervisor that has a larger area of responsibility.