Limiting Users to A Single Logon In The Domain
Last Updated: 04 Apr 2005
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
*** PLEASE NOTE: Link(s), If Provided, May Be Wrapped ***
The question often arises of how to limit a user to a
single concurrent login session in NT4/Win2K. Depending
on exactly what you are trying to accomplish, there are
a few different ways to go about it.
Under NT4, go to:
"User Manager --> User Properties --> Logon To"
Under Win2K, go to:
"Active Directory Users and Computers --> User Properties --> Account --> Logon To"
...and you will see an option to limit each user to a
specific workstation (or workstations). If your users are
never mobile, then this may be a simple solution for you,
although it is a pain to manage for a large number of
users (time for ADSI).
If, however, you don't care which machines your users
initially logon to, but you want to ensure that they
can't logon anywhere else until they logoff from the
first location, then the solutions are less straight-
forward.
You can make use of a logon script and check for
connections to Home Directories:
• http://www.jsiinc.com/SUBE/TIP2200/rh2290.htm
• http://www.jsiinc.com/SUBA/TIP0100/rh0175.htm
• http://www.jsiinc.com/SUBA/TIP0200/rh0296.htm
• http://is-it-true.org/nt/atips/atips331.shtml
Or you can make use of a couple Microsoft utilities:
• http://www.winnetmag.com/windowsnt20002003faq/Article/ArticleID/14454/
• http://support.microsoft.com/?KBID=237282
• http://www.thincomputing.net/newsitem296.html
• http://bink.nu/Article3619.bink
• http://bink.nu/files/limitlogonfaq.htm
• http://www.sadikhov.com/forum/Microsoft-Limitlogin-V1.0_21622.html
• http://download.microsoft.com/download/f/d/0/fd05def7-68a1-4f71-8546-25c359cc0842/limitlogin.exe
3RD PARTY UTILS
• MaxLogons ............... http://www.flocs.com/products/maxlogon/
• Signon Limiter .......... http://www.oneapp.co.uk/
• UserLock ................ http://www.softwareshelf.com/products/userlock.htm
