Restrict VPN to single session

How restrict users to single session on VPN? Windows 2003 Server Standard.

Thanks.

"Tyler Durden" <> wrote in message
news:...
> How restrict users to single session on VPN? Windows 2003 Server Standard.
>
> Thanks.
>


Search in this link for "How to Modify the Number of Simultaneous
Connections"

How to install and configure a Virtual Private Network server in ..To change
the number of simultaneous connections, follow these steps: ... Click Allow
access to grant the user permission to dial in.
http://support.microsoft.com/kb/323441

Just in case for others that have Windows 2000, search this link for "How to
Install and Enable VPN"

How To Install and Configure a Virtual Private Network Server in ...Type the
maximum number of simultaneous PPTP connections that you want ....
http://support.microsoft.com/kb/308208

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

Hi Ace, thanks, but I would like to restric users to single session; by
default the same user can connect many times.



"Ace Fekay [MVP-DS, MCT]" <> wrote in message
news:...
> "Tyler Durden" <> wrote in message
> news:...
>> How restrict users to single session on VPN? Windows 2003 Server
>> Standard.
>>
>> Thanks.
>>
>
>
> Search in this link for "How to Modify the Number of Simultaneous
> Connections"
>
> How to install and configure a Virtual Private Network server in ..To
> change the number of simultaneous connections, follow these steps: ...
> Click Allow access to grant the user permission to dial in.
> http://support.microsoft.com/kb/323441
>
> Just in case for others that have Windows 2000, search this link for "How
> to Install and Enable VPN"
>
> How To Install and Configure a Virtual Private Network Server in ...Type
> the maximum number of simultaneous PPTP connections that you want ....
> http://support.microsoft.com/kb/308208
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup or forum for collaboration benefit
> among responding engineers, and to help others benefit from your
> resolution.
>
> Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
> MCSA 2003/2000, MCSA Messaging 2003
> Microsoft Certified Trainer
> Microsoft MVP - Directory Services
>
> If you feel this is an urgent issue and require immediate assistance,
> please contact Microsoft PSS directly. Please check
> http://support.microsoft.com for regional support phone numbers.
>
>
>
>

"Tyler Durden" <> wrote in message
news:...
> Hi Ace, thanks, but I would like to restric users to single session; by
> default the same user can connect many times.
>

Oh, I see, sorry, I posted that too quickly.

By default, as far as I know, unless someone else has a better suggestion or
I'm overlooking a setting somewhere, there is no native way to restrict a
user to one concurrent session, other than going third party. I have many
customers using Cisco ASA 5505 or a Pix 501 or Pix 506e. With those devices,
or other similar solutions, you can restrict one VPN session per user.

I also found the following if you want to pursue this with Windows RRAS.
However, my suggestion is to use a third party.

Routing and Remote Access Blog : Limit one connection to the VPN ...Jul 17,
2008 ... Hello all, I thought it would be worthwhile to blog a post
specifically on this topic. I've seen quite a number of people having this
....
http://blogs.technet.com/rrasblog/ar...-per-user.aspx

Also, not sure what RRAS is installed on, but I highly suggest to not have
it running on a DC.

Ace

"Ace Fekay [MVP-DS, MCT]" <> wrote in message
news:...
> "Tyler Durden" <> wrote in message
> news:...
>> Hi Ace, thanks, but I would like to restric users to single session; by
>> default the same user can connect many times.
>>
>
> Oh, I see, sorry, I posted that too quickly.
>
> By default, as far as I know, unless someone else has a better suggestion
> or I'm overlooking a setting somewhere, there is no native way to restrict
> a user to one concurrent session, other than going third party. I have
> many customers using Cisco ASA 5505 or a Pix 501 or Pix 506e. With those
> devices, or other similar solutions, you can restrict one VPN session per
> user.
>
> I also found the following if you want to pursue this with Windows RRAS.
> However, my suggestion is to use a third party.
>
> Routing and Remote Access Blog : Limit one connection to the VPN ...Jul
> 17, 2008 ... Hello all, I thought it would be worthwhile to blog a post
> specifically on this topic. I've seen quite a number of people having this
> ...
> http://blogs.technet.com/rrasblog/ar...-per-user.aspx
>
> Also, not sure what RRAS is installed on, but I highly suggest to not have
> it running on a DC.
>
> Ace
>
>
>
>

Oh, is this SBS? I now realize that you've cross-posted it to the SBS group,
If it is, RRAS can run on it and is configurable with the wizard, but it's
still suggested to move it off, since it still creates a multihoming
scenario.

If not SBS, and it's a DC, I definitely suggest moving it elsewhere off a
DC.

btw - There's also the following tool, but I am not sure if it works with
RRAS.

How to Use a Network Share to Limit a User's Concurrent ...To restrict
concurrent logons for specific user accounts, use this logon script or
incorporate the script in an existing logon script. ...
http://support.microsoft.com/kb/260364

Ace

not SBS, I'll try your suggestions, thanks!


"Ace Fekay [MVP-DS, MCT]" <> wrote in message
news:...
> "Ace Fekay [MVP-DS, MCT]" <> wrote in
> message news:...
>> "Tyler Durden" <> wrote in message
>> news:...
>>> Hi Ace, thanks, but I would like to restric users to single session; by
>>> default the same user can connect many times.
>>>
>>
>> Oh, I see, sorry, I posted that too quickly.
>>
>> By default, as far as I know, unless someone else has a better suggestion
>> or I'm overlooking a setting somewhere, there is no native way to
>> restrict a user to one concurrent session, other than going third party.
>> I have many customers using Cisco ASA 5505 or a Pix 501 or Pix 506e. With
>> those devices, or other similar solutions, you can restrict one VPN
>> session per user.
>>
>> I also found the following if you want to pursue this with Windows RRAS.
>> However, my suggestion is to use a third party.
>>
>> Routing and Remote Access Blog : Limit one connection to the VPN ...Jul
>> 17, 2008 ... Hello all, I thought it would be worthwhile to blog a post
>> specifically on this topic. I've seen quite a number of people having
>> this ...
>> http://blogs.technet.com/rrasblog/ar...-per-user.aspx
>>
>> Also, not sure what RRAS is installed on, but I highly suggest to not
>> have it running on a DC.
>>
>> Ace
>>
>>
>>
>>
>
> Oh, is this SBS? I now realize that you've cross-posted it to the SBS
> group, If it is, RRAS can run on it and is configurable with the wizard,
> but it's still suggested to move it off, since it still creates a
> multihoming scenario.
>
> If not SBS, and it's a DC, I definitely suggest moving it elsewhere off a
> DC.
>
> btw - There's also the following tool, but I am not sure if it works with
> RRAS.
>
> How to Use a Network Share to Limit a User's Concurrent ...To restrict
> concurrent logons for specific user accounts, use this logon script or
> incorporate the script in an existing logon script. ...
> http://support.microsoft.com/kb/260364
>
> Ace
>
>
>

"Tyler Durden" <> wrote in message
news:...
> not SBS, I'll try your suggestions, thanks!

Scratch that SBS thing. I misread the newsgroup lists it was going to.

Try that idea, and let us know how it works out.

Ace