Restore Microsoft Settings

During ActivClient installation, ActivClient configures some Microsoft Windows policies to provide a full smart card experience (see section Microsoft Policies Relevant to ActivID ActivClient).

During ActivClient uninstallation, these Microsoft policies are not updated. You can leave them as is as they have no impact if you do not use smart cards anymore, or they can also be relevant to other smart card deployments. Alternatively, you might want to disable these policies.

1. Launch the Microsoft Group Policy Editor (gpedit.msc) and reset the following settings to Not configured:

   • Card removal – Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon : Smart card removal behavior

   • Certificate registration – Computer Configuration\Administrative Templates\Windows Components\Smart Card\Turn on certificate propagation from smart card

   • Card Auto Registration – Computer Configuration\Administrative Templates\Windows Components\Smart Card\Turn on Smart Card Plug and Play service

2. To propagate and apply the policy changes, run the gpupdate /force command on each domain client machine.