Domain Users Logon

[Darren King]

Dear All,

Was wondering whether anyone knows of a way via Group Policy of restricting
domain users accounts of a single logon to the domain???

As we have recently had quite a few instances of users sharing accounts
within one department and we want to restrict each account so they can only
logon once to prevent this.

Any advice is much appreciated,

Darren

 

[Mark Heitbrink [MVP]]

Hi,

Was wondering whether anyone knows of a way via Group Policy of restricting
domain users accounts of a single logon to the domain???

There is none. 3 Solutions ...

Logon/Logoff script:
1. logon:
if /i exist \\yourserver\yourshare\%username%.txt shutdown -l
echo I´m in > \\yourserver\yourshare\%username%.txt
2. logoff:
del \\yourserver\yourshare\%username%.txt /y

Limit Login:
http://www.microsoft.com/technet/technetmag/issues/2005/05/UtilitySpotlight/default.aspx
works like the script, but creates a session ID in a webservice,
so the user can´t delete his "%username%.txt" to logon twice

cconect from Resource Kit.
"Limiting a User's Concurrent Connections in Windows 2000 and
Windows NT 4.0"
http://support.microsoft.com/default.aspx?scid=kb;en-us;237282

Mark

 

[Jerold Schulman]

Dear All,

Was wondering whether anyone knows of a way via Group Policy of restricting
domain users accounts of a single logon to the domain???

As we have recently had quite a few instances of users sharing accounts
within one department and we want to restrict each account so they can only
logon once to prevent this.

Any advice is much appreciated,

Darren

Yes.

See tip 9159 » Microsoft releases LimitLogin v1.0.
in the 'Tips & Tricks' at http://www.jsifaq.com

See tip 8768 » How can I prevent users from logging on more than once, without using the Cconnect.exe Resource Kit Tool?

See tip 2290 » Limiting a user's concurrent connections in Windows 2000 and Windows NT 4.0?


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com