Discussion Locked

Terminating Active User Connections?

0 helpful
7 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Question - Need help finding a way to terminate an active user connection in AD.

Background - We are downsizing and as people are leaving some are not wanting to go quietly (Sending out stupid email, messing w/ files...etc.) Most of the ones leaving are in satalite offices with no IT staff. I can change someones password and disable there account, but if they are still logged in they keep access until they log out. I need a way to boot their connection from the network to enforce the password change/disable.

We are running 2000 in native mode w/ AD and Exchange 2000.

Any suggestions would be greatly appriciated.

Thank you,

Mark

7 replies

by curlergirl

On a domain controller, go into the Computer Management Console and open System Tools/Shared Folders/Sessions. This will tell you what users have active sessions on the domain controller. You can right click any user and click Close Session to disconnect them. I believe you would have to do this separately at each domain controller (or at least open a separate Computer Management console session for each of the DC's from one server) to be sure you disconnected any and all sessions open at all DCs. Hope this helps!

by captain obvious

Rather than just locking out accounts, when I have a user being terminated, I physically disconnect their terminal at the patch panel until they're out of the building. That way, there's no risk of them logging in using someone else's account.

If they're at a remote site, and there's not someone there to escort them out, I'll go as far as to shut down the entire site until they've left the building. Better safe than sorry.

by countupir

Right click on the user session in the comp management console and disconnect. It is actually called "Close Session". Try it, you'll like it.

This discussion is closed to new replies.