+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, restricting users to only one logon in Technical; I have just been made aware that a teacher is logging on students with her own username. Obviously this can't ...
  1. #1
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22

    restricting users to only one logon

    I have just been made aware that a teacher is logging on students with her own username. Obviously this can't happen, I tried using limit logon yesterday and as yet I haven't really got it working.

    Is there any other way of restricting logons to only one per user name? or something to notify me when it happens?

  2. #2

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,935
    Thank Post
    1,341
    Thanked 1,784 Times in 1,107 Posts
    Blog Entries
    19
    Rep Power
    595

    Re: restricting users to only one logon

    Easiest way ... tell the teacher involved that you will disable her account unless she stops. Inform whoever is in charge of data protection and let all other staff know that anything they have put in the shared areas that are only available to staff ... students now have access to because of this one user.

    See how quickly she stops.

  3. #3
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22

    Re: restricting users to only one logon

    GrumbleDook, what you say is very valid and that is one angle I will take on this issue, but I would like to prevent this from happening again, or at least know a way of monitoring the network for this type of issue.

  4. #4

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    639
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324

    Re: restricting users to only one logon

    Have a look at this suggestion

  5. #5
    edie209's Avatar
    Join Date
    Mar 2006
    Location
    Kernow
    Posts
    671
    Thank Post
    41
    Thanked 17 Times in 16 Posts
    Rep Power
    22

    Re: restricting users to only one logon

    Thanks webman, this could be just what I'm looking for.

  6. #6
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: restricting users to only one logon

    I've seen that floating around for a long time, but I've always thought I'd wait for MS to pull their fingers our and implement it in an update.....still waiting, might stop waiting.

  7. #7

    Join Date
    Jan 2006
    Posts
    143
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: restricting users to only one logon

    Quote Originally Posted by webman
    Have a look at this suggestion
    This is very similar to a homegrown approach we tried here; we found one fatal flaw with it.

    Often our users won't log off gracefully, in many cases they are more likely to hit the killswitch. This leaves the files created at logon in situ and the next time they try to logon they will get kicked off even if they are only logging on to the one machine.

  8. #8
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: restricting users to only one logon

    Quote Originally Posted by acb_
    Quote Originally Posted by webman
    Have a look at this suggestion
    This is very similar to a homegrown approach we tried here; we found one fatal flaw with it.

    Often our users won't log off gracefully, in many cases they are more likely to hit the killswitch. This leaves the files created at logon in situ and the next time they try to logon they will get kicked off even if they are only logging on to the one machine.
    Does this happen with the above mentioned method too then?

    If so it's probably not going to work as people are very prone to just holding the power button, must be easier for them or something!

    EDIT: Sorry yes, just read how it works and obviously if they turn off not log off it won't work.

  9. #9
    Face-Man's Avatar
    Join Date
    Dec 2005
    Location
    London
    Posts
    577
    Thank Post
    11
    Thanked 58 Times in 40 Posts
    Rep Power
    70

    Re: restricting users to only one logon

    I had a memeber of staff with the same issue total undermining our acceptable use policy and so after a "talk" with his line manager I added the four computers he need to use into the login workstation in AD as this stopped the excuss "the kids have hacked my password" (funny how easy that is when you tell them it). strangly he is no longer working here...

  10. #10

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    639
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324

    Re: restricting users to only one logon

    Yes the only flaw with logon + logoff scripts is that if one doesn't run - the action it carries out doesn't happen. The only way round this is with a continuous executable setting some sort of "logged in" flag on a server every "x" minutes or something like that, and which expires every "x" minutes as well.

    EDIT: Knew I had it somewhere I experimented with a VBS version of this ages ago and just remembered I had it. Never actually used it in production but tests were successful. It also includes an "excluded users" feature so you can allow certain users to log in more than once.
    Attached Files Attached Files

  11. #11
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,966
    Thank Post
    248
    Thanked 49 Times in 45 Posts
    Blog Entries
    2
    Rep Power
    46

    Re: restricting users to only one logon

    couldn't you just automate deleting all the logged on tokens at the end of every lesson?

  12. #12
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,637
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: restricting users to only one logon

    Quote Originally Posted by mark
    couldn't you just automate deleting all the logged on tokens at the end of every lesson?
    What about teachers who stay in the same room all day and stay logged on? Or if a user needs to work though break/dinner/double lessons?

  13. #13

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    639
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324

    Re: restricting users to only one logon

    And double-lessons? Or drop-in ones who don't follow the timetabled periods.

  14. #14

    Join Date
    Oct 2005
    Location
    West London
    Posts
    55
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: restricting users to only one logon

    :idea: Another way around the problem of a user not logging off might be to have the logon script create a second token text file, named for the computer and containing the users name. This would also be deleted by the logoff script. The you could have a third script that runs every time the computer boots, to check for the computername token, then if it exists read the username from it and delete both tokens. That way if a machine crashes or the user just turns it off, the token will be cleared as soon as that machine comes on again.
    What do you think?

  15. #15

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,406
    Thank Post
    639
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    324

    Re: restricting users to only one logon

    Excellent idea IanB

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. No Logon name after addding users by DSADD
    By tosca925 in forum Windows
    Replies: 8
    Last Post: 23rd May 2011, 08:31 PM
  2. EPortal logon fails for some users
    By robk in forum MIS Systems
    Replies: 0
    Last Post: 30th October 2007, 10:06 AM
  3. Restricting RIS
    By beast_gts in forum Windows
    Replies: 3
    Last Post: 28th June 2007, 09:26 PM
  4. Stop users closing bat/cmd shell at logon
    By apeo in forum How do you do....it?
    Replies: 10
    Last Post: 8th May 2007, 12:37 PM
  5. Replies: 1
    Last Post: 23rd February 2007, 12:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •