Limit login amounts?

[Guest]

Hello

I've been wondering if it's at all possible within AD or perhaps via script to limit the amount of times a specific user (or group) is allowed to login. For example, I have a guest user that I would like to login only 3 times and after that, the login will fail

I know that you can give account limits based on date, times and also locations, but I have been souring the net for ways to limit solely on the amount of logins. I have also stumbled on a MSDN knowledge base article which states that this is not possible on NT 4 and below however, since Windows 2000 and above were not mentioned, I figured that is was in fact possible, just hard to find. Thanks kindly in advance for any help

-- dave

 

[Guest]

Dave,
This can be done in your Global Account Security Policies
within your Win2K Server Admin tools. There is a policy
that limits logins, I think it under Local Security
though. You can also create your own for a group.

-Christopher

-----Original Message-----
Hello,

I've been wondering if it's at all possible within AD or

perhaps via script to limit the amount of times a specific
user (or group) is allowed to login. For example, I have
a guest user that I would like to login only 3 times and
after that, the login will fail.

I know that you can give account limits based on date,

times and also locations, but I have been souring the net
for ways to limit solely on the amount of logins. I have
also stumbled on a MSDN knowledge base article which
states that this is not possible on NT 4 and below
however, since Windows 2000 and above were not mentioned,
I figured that is was in fact possible, just hard to
find. Thanks kindly in advance for any help.

 

[Dave]

Thanks for the information Christopher,

I actually went through all of the policy sections and did
not find what I was looking for. Perhaps it's a section
that I overlooked in the Global Account Security Policies
section. Would you mind walking me through the steps to
get to the actual location of that Policy attribute. All
I see in that section is Denying (or Allowing) logging on
locally as well as Denying access to computers and such.
Thanks again for your help.

-- dave

 

[Robert Moir]

Hello,

I've been wondering if it's at all possible within AD or perhaps via
script to limit the amount of times a specific user (or group) is
allowed to login. For example, I have a guest user that I would like
to login only 3 times and after that, the login will fail.

I know that you can give account limits based on date, times and also
locations, but I have been souring the net for ways to limit solely
on the amount of logins. I have also stumbled on a MSDN knowledge
base article which states that this is not possible on NT 4 and below
however, since Windows 2000 and above were not mentioned, I figured
that is was in fact possible, just hard to find. Thanks kindly in
advance for any help.

You could limit the amount of connections to the user's home directory to 3
connections, and run a login script that tested for this connection and
logged the user off if it wasn't working right (obviously this would be the
case when the 4th user logged in).