Situatioin:
Large Windows 2000 domain, Exchange 2000, workstation XP : all patches and SPs applied.
All users are issued a AMART CARD which contains information for logging onto the network. Email address, PKI certificates, user account, user PIN, user company, etc.
This card is REQUIRED for logging onto the network, security is a prime priority.
Problem:
A user was assigned to us from a different company. This user has a card from the other company and it is used to logon to our network. The logon works perfectly and there is no problem. The issue is with the PKI certificates. Because the person came from a different company, they have a different email address.
We are unable to publish the user’s certificates to the GAL in AD and Exchange. The reason is because of the different domain name in the SMART CARD.
The person, who, because of their work assignment, must maintain logons to both domain network (No trusts) This card is the only way that they will be able to accomplish their logins.
We need to be able to publish the PKI certificates to the GAL so the individual can send and receive secure message.
Can anyone help us out with this problem?
thanks in advance.