Networks

Ask something
Discussion Locked

How To Stop 1 User Logging On, On 2 Computers

0 helpful
13 replies

by userdeletedbyrequest

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello,

I have a domain, the domain controllers are Microsoft Windows Server 2003 Enterprise Edition. What i want to do is to stop careless users from login on one computer then leaving it logged on then walking off and login on another computer. Is there a way to stop this? Is there anything in group policy?

Thanks Alot

Zak
E-mail: zakflemingo@gmail.com

13 replies

by nicknielsen

I haven't done any daily work with Windows Server since NT4, but I seem to recall a checkbox in the user setup that read "Allow multiple log-ins." In keeping with the M$ security posture of the day, this box was, of course, checked in the default profile.

I have no idea where M$ may have moved this option in the newer server OS's.

by w2ktechman

if there is a valid reason for these users to be logged into multiple machines.

currently I log into 3-5 machines simultaneously every day to perform specific tasks. This is work related, and would not be a benefit to use just 1 system.
case in point. I have a backup/data recovery desktop. If I had to use that system while I was trying to recover data from a dying drive, I may get to read 2 of my emails an hour. so I need to use a seperate machine.
case 2. If I have to test new SW, I dont want to do it on my 1 system, I need a seperate system because Who Knows how flaky it will become once I install crap on it.

these are just 2 reasons that I need to be logged into several machines. Find out from the user or users manager BEFORE disabling this service for them

by userdeletedbyrequest

I have taken this into account, its just down to being careless & lazy, what do i need to do so they only login one machine? thanks

by nicknielsen

How big a domain is it? If it's not too big, you can do this:

1. Go to the server that manages your domain, and use Explorer to open the folder where the user's roaming profiles are stored (usually %SystemRoot%Profiles[username]).
2. Select a user's folder, right-click on it, then select Properties | Sharing.
3. Share out the folder, and under User Limit select "Allow this number of users:" and set the value to 1.
4. Then click Permissions, remove access for all users, and then add access for only the user in question.

This only allows one connection at a time to the profile folder, which means that a user cannot log on to the same server twice.

Source: http://tinyurl.com/y9wkou (TechTarget registration required).

by w2ktechman

Ok, now you can use security settings in group policies to do this.

I would begin looking in Interactive Logon options, as I am sure it would be in there.

by nicknielsen

The user has to connect to his profile when he logs on, doesn't he? If it doesn't, try this solution from Windows IT Pro: http://tinyurl.com/ydqt96

I don't do servers, man, and I'm finding this stuff. :|

Google is your friend.

by now left tr

Never seen a GPO setting for this.

I remember Novell Netware had an option for this but not Windows.

by userdeletedbyrequest

Yes i know what your mean novell does have one its frustrating that windows doesn?t though, i just thought there might be something that i missed somewhere. anyway thanks for you help

by w2ktechman

but looking now, I do not see it.
Maybe I was thinking Novell, as used to us it too.
But, I did run across something that may help, a logon/logoff script. when the user logs on, it puts a record into a file, when the same user tries to logon again, it will check the file, if the user had not logged out, they cannot log in.

by blain.s.andrew

This should be found under the "Active Directory Users and Groups" tool.

Double click the user and choose the "Account tab". Hit the "logon to" button. Specify which computers you want this user to log into which computers.

^_^

This discussion is closed to new replies.