I'm looking for something--hopefully a group policy--that allows me to use a usb flash/thumbdrive as my login, or as the second factor along with my password.
In a nutshell, I'm doing this because I want to limit my own access to the administrator accounts on my laptop during the day, so that I'm jailed to an account that only has access to MS Word and some work-related websites.
If it's avoidable, I would prefer not to use third-party software.