Dealing with gaps in Windows logon control?

Windows lacks the classic logon session controls found in other environments (mainframe and midrange systems, UNIX, Netware, etc.).

For example :

- Windows provides no concurrent logon control
- there is no central record of logoffs in the Windows security log environment
- you have no ability to see in real-time who is logged on where
- you cannot remotely logoff interactive sessions
- you cannot configure time or workstation restrictions at the group level
- ?

How do you deal with that?