How do I remove the "insert a smart card" option from the Windows 7 logon screen?

Hi,

Thank you for posting the query on Microsoft Community Forums.

It looks like you need help in disabling the smart card logon option.

To disable Smart Card Plug and Play in local Group Policy, follow these steps:

a. Click Start, type gpedit.msc in the Search programs and files box, and then press ENTER.

b. In the console tree under Computer Configuration, click Administrative Templates.

c. In the details pane, double-click Windows Components, and then double-click Smart Card.

d. Right-click Turn on Smart Card Plug and Play service, and then click Edit.

e. Click Disabled, and then click OK.

Refer:

Error message when you insert a smart card in a reader on a Windows 7-based or Windows Server 2008 R2-based computer: "Device driver software was not successfully installed"
http://support.microsoft.com/kb/976832

Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the windows help article below.

Back up the registry
http://windows.microsoft.com/en-us/windows7/Back-up-the-registry

Hope this information helps. Do get back to us if you have more queries regarding Windows.

Hi Winston,

Your solution doesn't work on my system (windows7 enterprise) i.e it does not

I am seeing the same issue on Dell hardware, it appears on the Dell Precision M4800 and does NOT appear on the Dell Latitude 7440.

Both are using the exact same wim/image file delivered from SCCM 2012, Win 7 x64 Enterprise

I found this post....

http://social.technet.microsoft.com/Forums/windows/en-US/5517916d-c104-4dd9-a0ba-e44c532f4b1d/not-displaying-the-smart-card-logon-in-a-windows-7-client?forum=w7itprosecurity

Services:

Start, Run, services.msc

But I am still sorting out the root cause....

Starting the Smart Card (SCardSvr) makes no difference....

Device Manager:

Start, Run, devmgmt.msc

I see the Smart Card under Smart card readers on the M4800

Broadcom Usbccid Smartcard Reader (WUDF)

The Latitude 7440 is running the latest BIOS, I dont see any setting in the firmware/BIOS for the Smart Card.  And the drivers that are being deployed via SCCM are the latest driver cabs from Dell.

Registry:

Last but not least, when I look for the Credential Providers, I see additional providers on the M4800 vs the 7440

HKLM\Software\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers

Group Policy:

Start, Run, gpmc.msc

Thanks to the below article

I confirmed Group Policy wasn't configuring the Smart Card.

Computer Configuration, Policies, Administrative Templates, Windows Components, Smart Card

Turn on Smart Card Plug and Play service = not configured

http://technet.microsoft.com/en-us/library/ff404287(v=WS.10).aspx

I also found this post....

http://www.eightforums.com/network-sharing/36196-insert-smartcard-option-logon-screen-remote-desktop.html

Hi AristotelesMoura,

You have asked your question in the English language version of the Microsoft Community. Please click on the globe icon (Change Region) in the bottom left of the screen then select your preferred language. Once this is done, now ask you question again.

http://support.microsoft.com/common/international.aspx 

Hope this information helps you.

Hi,

The solution for this case.

1. If you have a manager smart card to enable your access to digital certificate, follow the steps below. Otherwise remove all of them, especially the SafeSign.

2. If you use the SafeSign (typically used by Certdsign, etc, to provide access to digital certificate) and are logged into Windows 7, download this remover registration at this link, unzip the file and apply the registry change.

3. If you have installed SafeSign is a different version of Windows and tried to remove the file available but the key was not found or did not result in the removal of the registry, and the registry edit (type regedit.exe in the search menu in "start") and navigate to the following key: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Authentication \ Credential Providers \
Go there by clicking on the keys that appear (they are files with multiple numbers in brackets. Example: "{232,876,589,380,658}") and look for the key that has defined the word as "aetcpss1". Finding the file, right-click, delete the key. Do not delete or change any remaining keys.

4. If you have installed another digital certificate manager, unlike SafeSign, try to locate the configuration file associated with it, and following the step described above, delete the corresponding key. DO NOT ALTER OR DELETE the other keys, such as those that contain the terms "GenericProvider", "NPProvider", "VaultCredProvider", "PasswordProvider", "Smartcard Pin Provider", "WinBio Credential Provider" or "CertCredProvider".

5. Reboot and ...

...should have solved your problem.

If you have installed SafeSign, try this simple solution: completely remove the SafeSign. Install a newer version of the same. Uncheck the "Credential Provider" option. The latest versions can come with this option enabled or not. By default should already be disabled.

Milbreno

Hi Milbreno,

Thank you for the reply and update.

Glad to know that you were able to fix the issue. Your efforts to resolve this issue is much appreciated.

Hi AristotelesMoura,

You have asked your question in the English language version of the Microsoft Community. Please click on the globe icon (Change Region) in the bottom left of the screen then select your preferred language. Once this is done, now ask you question again.

http://support.microsoft.com/common/international.aspx 

Hope this information helps you.

Hi!

Actually Aristoteles was answering to the question... dunno why he answered in Portuguese. As his answer is the best I found so far to solve the problem I will translate it.

Uninstall your Token or Smart Card driver and SafeSign (or other Token/Smart Card admin tool)  and reboot your PC. If you need to use the Token/Smart Card for other activities, reinstall your drivers and SafeSign but be careful to not tick the option where you give the Token/Smart Card power to manage credentials of the computer. This will solve the problem and the Token/Smart Card will still work.