Limiting users to logging on to one workstation at a time

Hello,

In a Windows 2000 domain with users having roaming profiles how can I limit
users so that they can only be logged onto one workstation at a time but
still allow them to logon to any available workstation.
I want to keep users from being logged into more than one workstation at a
time.

Thanks,
Joe

Hello Joe,
Take a look at loginlimit.
LimitLogin capabilities include:
- Limiting the number of logins per user from any machine in the domain,
including Terminal Server sessions.
- Displaying the logins information of any user in the domain according to a
specific criterion (e.g. all the logged-on sessions to a specific client
machine or Domain Controller, or all the machines a certain user is
currently logged on to).
- Easy management and configuration by integrating to the Active Directory
MMC snap-ins.
- Ability to delete and log off user session remotely straight from the
Active Directory Users and Computers MMC snap-in.
- Generating Login information reports in CSV (Excel) and XML formats.
Please keep in mind that this tool is Not Supported (similar to a resource
kit or support tool).

The public download location is
http://download.microsoft.com/downlo...limitlogin.exe


--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services


No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Resources

"Joe" <> wrote in message
news:338AB2F1-9037-408A-9A4D-...
> Hello,
>
> In a Windows 2000 domain with users having roaming profiles how can I
> limit
> users so that they can only be logged onto one workstation at a time but
> still allow them to logon to any available workstation.
> I want to keep users from being logged into more than one workstation at a
> time.
>
> Thanks,
> Joe

Thanks for the reply Christoffer.
I take it that there is nothing builtin to Windows 2000 that will do this
then? No GPO setting? That would be preferred but I will look at your
suggestion.
Thank you,
Joe

"chriss3 [MVP]" wrote:

> Hello Joe,
> Take a look at loginlimit.
> LimitLogin capabilities include:
> - Limiting the number of logins per user from any machine in the domain,
> including Terminal Server sessions.
> - Displaying the logins information of any user in the domain according to a
> specific criterion (e.g. all the logged-on sessions to a specific client
> machine or Domain Controller, or all the machines a certain user is
> currently logged on to).
> - Easy management and configuration by integrating to the Active Directory
> MMC snap-ins.
> - Ability to delete and log off user session remotely straight from the
> Active Directory Users and Computers MMC snap-in.
> - Generating Login information reports in CSV (Excel) and XML formats.
> Please keep in mind that this tool is Not Supported (similar to a resource
> kit or support tool).
>
> The public download location is
> http://download.microsoft.com/downlo...limitlogin.exe
>
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Resources
>
> "Joe" <> wrote in message
> news:338AB2F1-9037-408A-9A4D-...
> > Hello,
> >
> > In a Windows 2000 domain with users having roaming profiles how can I
> > limit
> > users so that they can only be logged onto one workstation at a time but
> > still allow them to logon to any available workstation.
> > I want to keep users from being logged into more than one workstation at a
> > time.
> >
> > Thanks,
> > Joe
>
>
>

No there is no built-in feature for this in the OS.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services


No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Resources

"Joe" <> wrote in message
news:9E93D508-A00B-47C1-B6D1-...
> Thanks for the reply Christoffer.
> I take it that there is nothing builtin to Windows 2000 that will do this
> then? No GPO setting? That would be preferred but I will look at your
> suggestion.
> Thank you,
> Joe
>
> "chriss3 [MVP]" wrote:
>
>> Hello Joe,
>> Take a look at loginlimit.
>> LimitLogin capabilities include:
>> - Limiting the number of logins per user from any machine in the domain,
>> including Terminal Server sessions.
>> - Displaying the logins information of any user in the domain according
>> to a
>> specific criterion (e.g. all the logged-on sessions to a specific client
>> machine or Domain Controller, or all the machines a certain user is
>> currently logged on to).
>> - Easy management and configuration by integrating to the Active
>> Directory
>> MMC snap-ins.
>> - Ability to delete and log off user session remotely straight from the
>> Active Directory Users and Computers MMC snap-in.
>> - Generating Login information reports in CSV (Excel) and XML formats.
>> Please keep in mind that this tool is Not Supported (similar to a
>> resource
>> kit or support tool).
>>
>> The public download location is
>> http://download.microsoft.com/downlo...limitlogin.exe
>>
>>
>> --
>> Regards
>> Christoffer Andersson
>> Microsoft MVP - Directory Services
>>
>>
>> No email replies please - reply in the newsgroup
>> ------------------------------------------------
>> http://www.chrisse.se - Active Directory Resources
>>
>> "Joe" <> wrote in message
>> news:338AB2F1-9037-408A-9A4D-...
>> > Hello,
>> >
>> > In a Windows 2000 domain with users having roaming profiles how can I
>> > limit
>> > users so that they can only be logged onto one workstation at a time
>> > but
>> > still allow them to logon to any available workstation.
>> > I want to keep users from being logged into more than one workstation
>> > at a
>> > time.
>> >
>> > Thanks,
>> > Joe
>>
>>
>>

Hi



Adding to chriss3 response:



I don't know what your gold is but...

Did you already considered Terminal Services in your environment?



With Terminal Services you can limit the number of connections 1 at the same
time for each user.



Again maybe this doesn't fulfill your needs but...




--
I hop that helps

Good Luck
Jorge Silva
MCSA
Systems Administrator

hi..

I just tried installing Limitlogin in our 2K3 server, it took me a week to
install the IIS and AD modules, after some reading in posts like this i think
i installed it right becouse at the end it tells me that it was installed
successfully. Any way my problem is the 3rd module
"limitloginclientsetup.msi".
Everytime i install it to a work station under my Domain with administrative
rights it says that i should install ".net frameworks ver 1.1.4322", and it
gives me an option to download it from the internet. So for the sake of
completing the task i gave an internet conection to that computer with a
security right to download (but not all computer should have internet
connection in our domain). The version of 1.1.4322 was not available anymore
so i downloaded and install the 3.5 version. After that i restarted the cpu
and tried to install again the limitloginclient and still it gave me the same
message "to install .net frameworks 1.1.4322.
I have been tring to solve for a 2 days now but it puts me in a loop, i
always comes back to "install .net frameworks 1.1.4322. This utility would
be a great help to me by limiting only 1 login name per user to be use in my
network.

Please help.

Thanks in advance

"chriss3 [MVP]" wrote:

> Hello Joe,
> Take a look at loginlimit.
> LimitLogin capabilities include:
> - Limiting the number of logins per user from any machine in the domain,
> including Terminal Server sessions.
> - Displaying the logins information of any user in the domain according to a
> specific criterion (e.g. all the logged-on sessions to a specific client
> machine or Domain Controller, or all the machines a certain user is
> currently logged on to).
> - Easy management and configuration by integrating to the Active Directory
> MMC snap-ins.
> - Ability to delete and log off user session remotely straight from the
> Active Directory Users and Computers MMC snap-in.
> - Generating Login information reports in CSV (Excel) and XML formats.
> Please keep in mind that this tool is Not Supported (similar to a resource
> kit or support tool).
>
> The public download location is
> http://download.microsoft.com/downlo...limitlogin.exe
>
>
> --
> Regards
> Christoffer Andersson
> Microsoft MVP - Directory Services
>
>
> No email replies please - reply in the newsgroup
> ------------------------------------------------
> http://www.chrisse.se - Active Directory Resources
>
> "Joe" <> wrote in message
> news:338AB2F1-9037-408A-9A4D-...
> > Hello,
> >
> > In a Windows 2000 domain with users having roaming profiles how can I
> > limit
> > users so that they can only be logged onto one workstation at a time but
> > still allow them to logon to any available workstation.
> > I want to keep users from being logged into more than one workstation at a
> > time.
> >
> > Thanks,
> > Joe
>
>
>

jojiepl01 <> wrote:
> hi..
>
> I just tried installing Limitlogin in our 2K3 server, it took me a
> week to install the IIS and AD modules, after some reading in posts
> like this i think i installed it right becouse at the end it tells me
> that it was installed successfully. Any way my problem is the 3rd
> module "limitloginclientsetup.msi".
> Everytime i install it to a work station under my Domain with
> administrative rights it says that i should install ".net frameworks
> ver 1.1.4322", and it gives me an option to download it from the
> internet. So for the sake of completing the task i gave an internet
> conection to that computer with a security right to download (but not
> all computer should have internet connection in our domain). The
> version of 1.1.4322 was not available anymore so i downloaded and
> install the 3.5 version. After that i restarted the cpu and tried to
> install again the limitloginclient and still it gave me the same
> message "to install .net frameworks 1.1.4322.
> I have been tring to solve for a 2 days now but it puts me in a loop,
> i always comes back to "install .net frameworks 1.1.4322. This
> utility would be a great help to me by limiting only 1 login name per
> user to be use in my network.

Instead of using limitlogon, which is an immense pain in the a**, try this:
http://windowsitpro.com/article/arti...with-gpos.html




>
> Please help.
>
> Thanks in advance
>
> "chriss3 [MVP]" wrote:
>
>> Hello Joe,
>> Take a look at loginlimit.
>> LimitLogin capabilities include:
>> - Limiting the number of logins per user from any machine in the
>> domain, including Terminal Server sessions.
>> - Displaying the logins information of any user in the domain
>> according to a specific criterion (e.g. all the logged-on sessions
>> to a specific client machine or Domain Controller, or all the
>> machines a certain user is currently logged on to).
>> - Easy management and configuration by integrating to the Active
>> Directory MMC snap-ins.
>> - Ability to delete and log off user session remotely straight from
>> the Active Directory Users and Computers MMC snap-in.
>> - Generating Login information reports in CSV (Excel) and XML
>> formats. Please keep in mind that this tool is Not Supported
>> (similar to a resource kit or support tool).
>>
>> The public download location is
>> http://download.microsoft.com/downlo...limitlogin.exe
>>
>>
>> --
>> Regards
>> Christoffer Andersson
>> Microsoft MVP - Directory Services
>>
>>
>> No email replies please - reply in the newsgroup
>> ------------------------------------------------
>> http://www.chrisse.se - Active Directory Resources
>>
>> "Joe" <> wrote in message
>> news:338AB2F1-9037-408A-9A4D-...
>>> Hello,
>>>
>>> In a Windows 2000 domain with users having roaming profiles how can
>>> I limit
>>> users so that they can only be logged onto one workstation at a
>>> time but still allow them to logon to any available workstation.
>>> I want to keep users from being logged into more than one
>>> workstation at a time.
>>>
>>> Thanks,
>>> Joe