doug

Hello All:

Can anyone suggest the best way to provide 2 factor authentication for VPN
Users. Rather not go to tokens because of cost factor. Can Microsoft
Certificate Services work in this scenario? I haven't been able to get this
to fly as of yet so either it is not possible or I am doing something wrong.

Thanks

pawan agarwal \(msft\)

Smart cards along with user-name/password is most common way to provide 2
factor authentication with microsoft products. Certificates are supported in
this scenario.

For overview of suport look at the article mentioned for the details.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windowsserver2003/proddocs/entserver/Best_Connectivity_and_Security.asp

For details about deploying look at
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/topics/smrtcard/smrtcdcb/sec3/smartc10.asp

-Pawan

--
-------------------------------------------------------------------------
"This posting is provided "AS IS" with no warranties, and confers no
rights."
------------------------------------------------------------------------