How To Stop 1 User Logging On, On 2 Computers

Networks

Collapse -

User profile

by NickNielsen · 11 years ago In reply to How To Stop 1 User Loggin ...

I haven't done any daily work with Windows Server since NT4, but I seem to recall a checkbox in the user setup that read "Allow multiple log-ins." In keeping with the M$ security posture of the day, this box was, of course, checked in the default profile.

I have no idea where M$ may have moved this option in the newer server OS's.

Collapse -

You may want to find out first

by w2ktechman · 11 years ago In reply to How To Stop 1 User Loggin ...

if there is a valid reason for these users to be logged into multiple machines.

currently I log into 3-5 machines simultaneously every day to perform specific tasks. This is work related, and would not be a benefit to use just 1 system.
case in point. I have a backup/data recovery desktop. If I had to use that system while I was trying to recover data from a dying drive, I may get to read 2 of my emails an hour. so I need to use a seperate machine.
case 2. If I have to test new SW, I dont want to do it on my 1 system, I need a seperate system because Who Knows how flaky it will become once I install crap on it.

these are just 2 reasons that I need to be logged into several machines. Find out from the user or users manager BEFORE disabling this service for them

Collapse -

All taken into account

by UserDeletedByRequest · 11 years ago In reply to You may want to find out ...

I have taken this into account, its just down to being careless & lazy, what do i need to do so they only login one machine? thanks

Collapse -

OK, here goes

by NickNielsen · 11 years ago In reply to All taken into account

How big a domain is it? If it's not too big, you can do this:

1. Go to the server that manages your domain, and use Explorer to open the folder where the user's roaming profiles are stored (usually %SystemRoot%Profiles[username]).
2. Select a user's folder, right-click on it, then select Properties | Sharing.
3. Share out the folder, and under User Limit select "Allow this number of users:" and set the value to 1.
4. Then click Permissions, remove access for all users, and then add access for only the user in question.

This only allows one connection at a time to the profile folder, which means that a user cannot log on to the same server twice.

Source: http://tinyurl.com/y9wkou (TechTarget registration required).

Collapse -

mandatory profiles

by UserDeletedByRequest · 11 years ago In reply to OK, here goes

i need it for mandatory profile users

Collapse -

It should work

by NickNielsen · 11 years ago In reply to mandatory profiles

The user has to connect to his profile when he logs on, doesn't he? If it doesn't, try this solution from Windows IT Pro: http://tinyurl.com/ydqt96

I don't do servers, man, and I'm finding this stuff.

Google is your friend.

Collapse -

Good

by w2ktechman · 11 years ago In reply to All taken into account

Ok, now you can use security settings in group policies to do this.

I would begin looking in Interactive Logon options, as I am sure it would be in there.

Collapse -

exact place

by UserDeletedByRequest · 11 years ago In reply to Good

do you have the exact place i cant find it

Collapse -

GPO?

by NOW LEFT TR · 11 years ago In reply to Good

Never seen a GPO setting for this.

I remember Novell Netware had an option for this but not Windows.

Collapse -

Yes

by UserDeletedByRequest · 11 years ago In reply to GPO?

Yes i know what your mean novell does have one its frustrating that windows doesn?t though, i just thought there might be something that i missed somewhere. anyway thanks for you help

Networks

General discussion