Re: Can I Prevent Multiple Logons?

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam_at_hydro.com)
Date: 05/05/03 

Date: Mon, 05 May 2003 13:32:53 +0200

Chris Forzetting wrote:

> I admin a domain at a school and I want to prevent my students from letting
> their friends who are not in the class use their logons to access the system
> here. I have found references to auditing multiple logons, but nothing
> about if they can be prevented.

Hi

There is nothing builtin that can help you with that, but here are some ways
that might work for you:

==================================================
You could install the CCONNECT Microsoft Resource Kit utility onto every
computer, it is in the Win2k Server Resource Kit, Supplement 1 (you will need
a SQL server database as well):

>From the CConnect docs:

Features:

 Is completely hidden from the end user.
 Keeps track of all computers that users are logged into.
 Allows concurrent connection limitations to be set on a per-user/group basis.
 All information is kept in a Microsoft SQL Server database assigned by the
Administrator.
 Tracks last known user of the computer
 Monitors what logon server users are logging into.

More here:

Limiting a User's Concurrent Connections in Windows 2000 and Windows NT 4.0
http://support.microsoft.com/default.aspx?scid=KB;EN-US;237282

==================================================
If CConnect is not an option, putting PsLoggedOn.exe in the logon script may
work. It is in the free PsTools suite at
http://www.sysinternals.com/ntw2k/freeware/pstools.shtml

>From the docs:
"If you specify a user name instead of a computer, PsLoggedOn searches the
computers in the network neighborhood and tells you if the user is currently
logged on."

==================================================
Here is a third variant:

Tip 296 at http://www.jsiinc.com/

0296 » A better way to prevent a user from logging on more than once.
http://www.jsiinc.com/SUBA/tip0200/rh0296.htm

==================================================
and then there are 3rd party buy products, here is one example:

UserLock
http://www.isdecisions.com/index.cfm?p=products-userlock 

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter

Relevant Pages

  • Re: How to prevent domain user from logon to more than one computer
    ... All information is kept in a Microsoft SQL Server database assigned by the ... Limiting a User's Concurrent Connections in Windows 2000 and Windows NT 4.0 ... Microsoft MVP Scripting and WMI, ...
    (microsoft.public.win2000.security)
  • RE: Extremely slow logons SBS2k
    ... Are logons directly to the SBS server delayed for long periods of time as ... are your Win2k clients pointing ... Microsoft Online Support Engineer ...
    (microsoft.public.windows.server.sbs)
  • Re: load balance for AD Controllers
    ... so Microsoft have not made a solution for that? ... they just want to keep for backup logons instead faster one dies. ... unfortunately logon using the slower Domain controller for some reason. ...
    (microsoft.public.win2000.active_directory)
  • Re: Logged on users!
    ... set a high limit on concurrent logons. ... Limit Login Attempts With LimitLogin ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windows.server.scripting)
Quantcast