When trying to log on, you receive the following error message:
“The System could not log you on. Make sure your User name and domain are correct, and then type your password again...”
When using Smart cards to log on to Win XP endpoints and the authentication method in Web Interface is configured to use Pass-through using Kerberos (without Smart card), the user is able to open a Web Interface page without any problem but when trying to start the virtual desktop, the Pass-through fails. The user gets the GINA for the virtual machine instead of Pass-through to the virtual machine.
This issue only happens when using the Smart card to log on to the endpoint. If the logon has both the Username and the Password, the Pass-through process works.
This is an expected behavior. XenDesktop does not support logging on to the primary endpoint (client) using a Smart Card then Pass-through with Kerberos (without Smart Card) to start XenDesktop Virtual Desktop Agent.
The following are the two supported options:
Use Smart card to log on to Endpoint with Pass-through and Smart card to start Virtual Desktop Agent.
Note: You must install Smart software on the Virtual Desktop Agent and enable Pass-through with Smart card in Web Interface authentication method.
Log on without Smart card to the endpoint and use Pass-through with Kerberos to start Virtual Desktop Agent.