hi everyone, here is my problem :1) my users logon to their workstation via Smartcard with Windows certificate (Win 2003 SP2 as CA server)2) I reviked the Cert of one of my users3) the user still can logon to his workstationDid I forget something ?Thank you for helping,

Hi No you did not forget anything.But the CRL list are cached localy on the client.And as long as the CRL-lists are valid the client will not change them.To clear the CRL cache in vista use certutil -setreg chain\ChainCacheResyncFiletime @now/Johan