I have a USB token, and I want clients to use their token to log on to domain, I followed the steps from here
a brief definition of what I have done yet:
after installing domain and CA-server, I defined a special group, created a special certificate template (smart card log on), mapped them.
now the client successfully receives the certificate and I successfully installed the certificate with its special software on the USB token, finally the USB token is ready!
I defined some policies within the server to enable the smart-card logon, but there isn't any change on logon page!
what's wrong with it???