lupodwdm
asked on
Limit user login to domain to once per account
I need to limit the number of times a user can log into the domain with the same account. i.e. If three people share the same domain account I only want to allow them to use that account one at a time. I do not want the three people to all log in at once with the same account.
I also don't want a user to be able to log into more than once server at once with their domain account.
I found a tool called limit-login from Microsoft, but I thought there was a way to do this with group policy. I would prefer to do this in GP instead of putting another app on the servers.
I also don't want a user to be able to log into more than once server at once with their domain account.
I found a tool called limit-login from Microsoft, but I thought there was a way to do this with group policy. I would prefer to do this in GP instead of putting another app on the servers.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
No there is no group policy tool for this - - you have found the limit-logon tool, which does the job.
BTW - it is BAD practice to have users sharing the same account, privicy, security and the ability to audit are all compromised.
This question also was discussed on another board a few months ago and one of the MVPs there said
"...Some companies are doing this by restricting the share of the home-folder to one session and check in the logon-script whether the home-drive is available if not logout ..."
He suggested that because limitlogon isn't the greatest program ever.
Thanks
Mike