prevent simultaneous logons to multiple computers?

[Jonathan Horne]

our users are sharing their network logon with
freelancers, and im trying to figure out if i can prevent
user accounts from logging on more than once (or to more
than one computer at a tiem) via GPO. ive been unable to
find such a setting so far. anyone have any ideas or
pointers?

i would also need to not affect domain admins or my IT
support users, but im sure i would be able to do that with
container manipulation. we have a windows 2000 AD domain.

thanks,
jonathan

 

[Chriss3]

Hello Jonathan there is a such tool for doing this within the Windows2000
RESKIT.

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1

 

[Guest]

i have the resource kit, but im unable to indentify which
tool you mean. can you tell me which one it is?

 

[Oli Restorick [MVP]]

Prevent users from logging on more than once.
http://www.jsiinc.com/suba/tip0100/rh0175.htm

A better way to prevent a user from logging on more than once.
http://www.jsiinc.com/SUBA/tip0200/rh0296.htm

 

[Derek Melber [MVP]]

Chris is correct, it is in the RESKIT. It is called Cconnect (concurrent
connections).

Also, another slick way to control WHICH Computers a user can logon to is in
the user properties in AD. There is a Log on to computer feature, that
allows you to specify which computer that user account can logon to. Might
work for you, but cconnect is the tool you are looking for.