Hi, i have win 2008 R2, i followed all steps mentioned here to configure authentication assurance http://technet.microsoft.com/en-us/library/dd378897%28WS.10%29.aspx#BKMK_13 I have linked an issuance policy to an AD group , and running this command .\get-IssuancePolicy.ps1 –LinkedToGroup:All shows that the issuance policy is successfully mapped to the AD group. Now user A is enrolled a smart card with that issuance policy. After we logged on , and running whoami /groups , it doesnt show that he is member of that group. How can we start even troubleshooting those stuffs?ammarhasayen