Authorization and authentication in Windows 10 using a USB key?

Question

Information Security

Hello everyone, help me find the right software for the following situation:
there is a separate machine without a domain on Windows 10, there is an administrator and a user, the administrator password can be compromised;
What is needed:
replace the standard request for administrator privileges (password entry) with the use of a token with a reader for each operation, or disable UAC when the USB key is detected by the axis and carry out all operations that require elevation only while it is inserted into the PC.
U.P. 09/06/2018 - may not have formulated the question quite correctly before - in addition to authorization, it is necessary, among other things, to increase privileges through a token or a regular usb-drive,

Answer 1

And why buy third-party software if Windows has everything built-in. Buy a SmartCard and a reader for it. Configure the use of Smart in local policies and go ahead

Answer 2

If you need to enter only by token, then buy any identifier + reader that supports win10, or PAK: rohos, sable, chord, whatever, as long as there is win10 support and the login function is only by identifier.
If you are afraid of password compromise, then you enable two-factor for free in win10, where the second factor is the code from the application on the phone:

howto

Откройте «Параметры» и выберите «Учётные записи».
На вкладке «Ваши данные» щёлкните на «Войти вместо этого с учётной записью Microsoft».
Выберите «Управление учётной записью Microsoft». В браузере откроется страница с параметрами вашей учётной записи. Отыщите раздел «Безопасность».
Откройте «Дополнительные параметры безопасности». Система может попросить ввести код подтверждения, отправленный на ваш электронный адрес.
Найдите на странице пункт «Настройка двухшаговой проверки» и включите двухфакторную аутентификацию.

Answer 3

https://www.rohos.com/products/rohos-logon-key/
Paid, $60, but supports many devices.

Answer 4

Google in the direction of "etoken Windows authorization". But as a rule, the solutions are buggy and low-scalable (the driver fell off, the key was broken / lost, the procedure for updating the code etc was violated). IMHO, Bitlocker is more efficient.