Restricting simultaneous logons in Windows 2000 Server

gords · 3rd April 2002, 12:24 PM

G'day everyone,
I was wondering if anyone knows how to restrict users so they can only logon to one machine at a time using Windows 2000 Server and Pro OSs. The point of this is so that users don't mistakenly log onto more than one machine and forget to logout.

I have looked in Active Directory Users and Computers for an option that does this and cannot find one. I also looked in individual users' profiles - the only thing I can see has got to do with Windows Terminal Services, which we do not run.

Any help would be appreciated.
Thanks!
gords

maddhatter · 3rd April 2002, 6:31 PM

If you've got a SQL Server lying around, try this page.

haXor · 3rd April 2002, 11:15 PM

it can be done, I'm just trying to remember where the fuck you do it.
Im pritty sure that its not in group policy but do not quote me on that.

pax · 4th April 2002, 9:23 AM

I'm checking TechNet, will let you know [edit: nothing under TechNet, and the senior networks admins know of no way also]. I know it can be done under NetWare, and I'm sure it can be done under 2K too [edit: hmm no it cannot, well bugger me].

Pax

gords · 4th April 2002, 10:17 PM

Thanks for all your help, guys. As far as I can see, the 'solution' that MS provide is shocking (as detailed on the page maddhatter linked to). The only alternative I know of is called UserLock, which is basically a logon auditor. My only gripe is the way they do their licensing - per user, not per machine. At the school I work at there's 800 users, with each user costing approx $2 Australian.

Ah well. Whinging won't provide a solution, so I'll stop. Thanks for all your efforts, and thanks especially to pax, for helping me out once again!

Cheers!

3rd April 2002, 12:24 PM	#1
gords Thread Killer Join Date: Aug 2001 Location: Sydney, Australia Posts: 6,141	Restricting simultaneous logons in Windows 2000 Server G'day everyone, I was wondering if anyone knows how to restrict users so they can only logon to one machine at a time using Windows 2000 Server and Pro OSs. The point of this is so that users don't mistakenly log onto more than one machine and forget to logout. I have looked in Active Directory Users and Computers for an option that does this and cannot find one. I also looked in individual users' profiles - the only thing I can see has got to do with Windows Terminal Services, which we do not run. Any help would be appreciated. Thanks! gords

3rd April 2002, 6:31 PM	#2
maddhatter Member Join Date: Jun 2001 Location: 21.1607°S, 149.0648°E Posts: 4,554	If you've got a SQL Server lying around, try this page. __________________ postcount=postcount+1;

3rd April 2002, 11:15 PM	#3
haXor Member Join Date: Dec 2001 Location: I am just a figment of your imagination... Posts: 254	it can be done, I'm just trying to remember where the fuck you do it. Im pritty sure that its not in group policy but do not quote me on that. __________________ I HAVE CONVERTED TO INTEL

4th April 2002, 9:23 AM	#4
pax Member Join Date: Jun 2001 Location: God's Country Posts: 1,342	I'm checking TechNet, will let you know [edit: nothing under TechNet, and the senior networks admins know of no way also]. I know it can be done under NetWare, and I'm sure it can be done under 2K too [edit: hmm no it cannot, well bugger me]. Pax Last edited by pax; 4th April 2002 at 10:05 AM.

4th April 2002, 10:17 PM	#5
gords Thread Killer Join Date: Aug 2001 Location: Sydney, Australia Posts: 6,141	Thanks for all your help, guys. As far as I can see, the 'solution' that MS provide is shocking (as detailed on the page maddhatter linked to). The only alternative I know of is called UserLock, which is basically a logon auditor. My only gripe is the way they do their licensing - per user, not per machine. At the school I work at there's 800 users, with each user costing approx $2 Australian. Ah well. Whinging won't provide a solution, so I'll stop. Thanks for all your efforts, and thanks especially to pax, for helping me out once again! Cheers!