Hi all, I've setup smart card logon on a 2008 R2 PKI server with an AD 2008 R2. I've revoke the certificate and published the crl on the PKI server. I can always be connected with my smart card, the certicate is always valid. What should I do to disable immediatly a smart card? Thanks in advance

Hi Brian, If I can't use the OCSP, how can I distribute a new CRL automatically to all the DCs? Do we have a GPO to setup the period where the DC download a new CRL? Is it setup by default? I don't want to modify the current period of the CRL. Thanks