Scripts Thread, Limiting Logons by detecting dupe users in AD in Coding and Web Development; I used to limit the student logons by restricint their home share to one user, and then testing if their ...
17th August 2009, 02:54 PM #1
- Rep Power
Limiting Logons by detecting dupe users in AD
I used to limit the student logons by restricint their home share to one user, and then testing if their home share mapped.
BUT this meant we had to share each home folder.
how about a script that ran (constantly or every minute) to look at AD to see if there is any duplicate user accounts with an active session?
do you think this would be easy (this is why i am asking the experts).
IDG Tech News
17th August 2009, 04:01 PM #2
I used to have one put lost the bugger. All you need to do is make a logon script that creates a .txt file in a shared area. If one exists boot the user off because the script has been run before.
If you add a log off script to delete the text file you will be good to go.
We ditched this though as it was a pain when kids hit the reset button. We purchased UserLock. It is easy to setup a deploy and can do much more than limiting logon sessions. Have a look on the website for mor details
17th August 2009, 04:54 PM #3
Active Directory itself has no concept of user sessions, only single authentications.
17th August 2009, 05:06 PM #4
If you want a free solution, have a search for "Limit Logon" or alternatively pay for Userlock.
18th November 2009, 04:54 PM #5
We wrote our own scrip this year that uses a SQL Database to track the user sessions and WMI to log them off when it has exceeded the limit. We used to use Limit Logon, but had many issues with the upkeep of it.
19th November 2009, 08:53 PM #6
- Rep Power
Set up a Group Policy Object, apply it to the students and set login limits there. This will be an automatic solution. You already stated that it was in Active Directory. Might as well use the free tools that are available and minimize your headaches if possible.
19th November 2009, 08:56 PM #7
Where can you set in GPO the number of concurrent logons?
Originally Posted by n1wgk
19th November 2009, 09:10 PM #8
- Rep Power
I hadn't set up the AD Group Policy for Limit Login, I only saw the entry in the listing. When you asked me where it's set up, I realized that there's a software deployment happening and there's a VB script running that sets up the client side limit login.
There's an MSI that gets deployed called LimitLoginClientSetup.msi. There may be something that can be found on line that will better explain what this product does.
Sorry for any confusion...and I will learn to double check my sources before assuming that my predecessor actually found something useful built into AD without mods.
19th November 2009, 09:15 PM #9
By soapyfish in forum *nix
Last Post: 30th March 2009, 01:11 PM
Last Post: 11th March 2009, 11:45 AM
By browolf in forum Windows
Last Post: 16th October 2008, 09:23 AM
By maniac in forum General Chat
Last Post: 2nd May 2008, 12:19 PM
By Chrispy in forum How do you do....it?
Last Post: 9th June 2006, 10:21 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)