Computer Configuration > Policies > Centrify Settings > Mac OS X Settings > Security & Privacy > Require smart card login
Require all users to log in with a smart card. When this policy is enabled, no users can log in to the computer simply with a user name and password, with the exception of those you add to an exception group as explained below.
Note: To require smart card login for a specific user rather than all users on the computer, in the user’s Active Directory account properties, specify the option, Smart card is required for interactive logon.
The Enable smart card support policy must also be enabled in order for this policy to take effect.
Once enabled, this group policy takes effect when the computer is rebooted