Disabling Simultaneous Logins

[Guest]

Does anyone know how I can restrict simultaneous logins?

I've got users who like logging onto 4 or 5 machines so they and their
buddies can get online and play games together and I'm NOT running an arcade.

I'm OK with a third party software package as long as it doesn't require a
large amount of overhead.

 

[Guest]

Hi there Richard,

Are they using a system as a game server? Also, are you running your
systems in a domain? If so, then you can block the application by the Hash
ID of the application. For more information, click here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;324036

Let me know if this helps.

Best Regards,

~Will Anderson

 

[Guest]

Will,

No they're not running a game server; but groups of them get together and
either access a game server from another location or they get on something
like Yahoo Games.

Let me give you some background into how my area is set up. I am the I.T.
guy for a college within a university. I have two domains: one for
facultyand staff and one for students. Both are Server 2003 domains with
AD. Each person has their own login ID. Our labs are restricted to being
used only by business students. So one guy has a legit account will bring in
his buddies who aren't business students because we have some of the news
hardware on campus.

I also need a way to log out student accounts that have been idle for longer
than say an hour and a half ro so. An ideas there?

Thanks for your help!

 

[Guest]

Hi there Richard,

Sorry for the long wait...weekends and all...

Have you tried blocking the particular application by the hash ID via Group
Policy? This will take care of the installed apps. As far as the Yahoo
games thing, you can also block the URL through Group Policy and the new
Windows Firewall settings.

As far as the idle time thing with userids...I don't think theres a setting
to log the person out, I'm sure you could probably script it or do some kind
of an @ job. I know you can do it for Term Services connections, but not
connections at the console.

Let me know if any of this helps.

Best Regards,

~Will

 

[Guest]

Will I found an answer to my inactive logins issue. Take a look at this link:
http://www.jsifaq.com/SUBT/tip9500/rh9541.htm

With regard to the simultaneous logins problem I found a script that writes
a simple text file containing the username and a second one that writes the
machine name. The script looks to see if the user trying to log in and the
machine name already exist. If either do then LOGOFF is executed. There is
a separate file that runs when the user logs off.

Here's LOGIN.BAT:
If exist \\SERVERNAME\logons\%username%.txt goto notlogon
echo %username% logged in from %computername% >
\\SERVERNAME\logons\%username%.txt
echo %username% logged in from %computername% >
\\SERVERNAME\logons\%computername%.txt
goto end

:notlogon
logoff

:end

And here's the script that runs on logout called LOGOFF.BAT:
if not exist \\SERVERNAME\logons\%computername%.txt goto notlogon
del \\SERVERNAME\logons\%username%.txt
del \\SERVERNAME\logons\%computername%.txt
goto end

:notlogon
logoff

:end

Of course, wherever you see SERVERNAME use the name of YOUR server. I have
these two files in my scripts folder.

It may not be the most elegant solution; but it works here.