Multi-User PKI and "Kiosk" Mode for Windows 10
Our environment is a tactical system used by USAF. It is always on, meaning it has to be logged into a user account. But the actual person operating the system will rotate.
It would be great to be able to sign in under a "kiosk" local user account with bare minimum permissions, including running the tactical application. Then a user would place their PKI token (CAC) into the card reader and enter their PIN. All use of the system would be logged under their ID. When one user rotates off station, removing their token, the system would continue to run under the "kiosk" account context until another user enters their token (and their PIN)