Restricting 1 Session per user in Active DIrectory

Posted on 2009-04-17
Last Modified: 2012-06-21
Currently users who activate their accounts in my AD environment can login on multiple system with the same account. I would like to restrict user account to just one login session. Thank you for the assistance.
Question by:Krisnademonizer
    LVL 15

    Expert Comment

    You could try this:
    Alternatively, you can restrict each user to logon to only a single workstation through the logon restrictions properties of the user.  But if you want users to be able to use different workstations, but only one at a time, that won't work for you.

    What's the exact problem you're trying to address, there may be another/easier way.
    LVL 1

    Expert Comment

    You can Click Star menu>Programs>Administrative Tools and Click Terminal Service Configuration
    Click to Server Setting and Change Restric Each User to one session.
    If you have any issue with this, you can see the link bellow for more details:

    Author Comment

    I want users to be able to logon to different workstations, but only one at a time. Limiting two persons from using the same user account.
    LVL 47

    Accepted Solution


    Author Comment

    I forgot some vital info.....

    1). AD is a server running Server 2008 Enterprise core
    2.) Clients run Vista Business and XP Pro
    LVL 47

    Expert Comment

    You may still be able to use limitlogin

    p.s. article doesnt validate(just a better article than previous post)

    Author Comment

    Thanks, will let u guys know the results when I'm done testing this afternoon.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I came across this issue when setting up a two way forest level trust. so here's the scenario: A company wildcards acquired another company, bizworks ( both Fictitious). Wild cards: windows 2003 Domain & forest functional levels - Ad domain na…
    Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now