Allow users to login only once.

[Risrollout]

What is the best way to force users of a OU to only be
able to login to the domain once? To clairify, I want a
user of a OU to be able to log in on any machine but only
one machine at a time to the domain how would I
accomplish this in a W2k AD domain.We do not use roaming
profiles.

 

[Mike Aubert]

You can't do this directly with Group Policy, but there are ways....

Have a look at the CConnect.exe tool in the Windows 2000 Resource Kit. Here
are some details on what it can do:

http://support.microsoft.com/?kbid=237282


That's not the only way to limit the number of logons
(http://www.jsiinc.com/SUBA/tip0200/rh0296.htm for example), but CConnect
seems to be the most flexable.

------------------------------------------------------------------
Mike Aubert
MCSE, MCSD, MCDBA
(e-mail address removed)

Note the "news2" in my email address is temporary and may be changed in the
future, remove it to email me at my Permanente address.
This posting is provided "AS IS" with no warranties, and confers no rights.