LimitLogin Queries

[Gatt]

OK installed LimitLogin this week, set the users to only be allowed 1 login session.

But... when the pupils login - even when they have logged off another PC - they are still being auto-logged out as if they are still logged in..

Am I missing something?

Also,

how do you display a message stating that they are already logged onto %machine-name% ?

[DMcCoy]

Do you have the logoff script running too? There is one for login, and one for logout - they both need to be assigned in the group policy.

You can also edit the llogin.vbs on the server to popup a window showing the machine the other login is in use on

You need to uncomment the two middle lines in here (I have increased the logout wait time to 40 seconds, as it takes a while to finish logging in after the script is run)

	' ==============BEGINNING OF CODE TO REMOVE REMARK==============
	 wshShell.run "lloginsessions " & loginok
	 wscript.sleep 40000
	' ==============END OF CODE TO REMOVE REMARK==============

[SpuffMonkey]

And you have to watch out for all the kids (and teachers) who just switch the PCs off at the mains instead of logging out. I run the "Clear All Entries" thing every night.

[Gatt]

And you have to watch out for all the kids (and teachers) who just switch the PCs off at the mains instead of logging out. I run the "Clear All Entries" thing every night.

This sounds like what they Might be doing!
Will bang some heads together today

@DMCoy: Will double check the script and make sure i did uncomment them..

[mark]

And you have to watch out for all the kids (and teachers) who just switch the PCs off at the mains instead of logging out. I run the "Clear All Entries" thing every night.

Sounds like just punishment - just let them know why they have to wait for you to reset it all the time - they'll soon learn. Better for the machines too.

[jonwitts]

I have just got LimitLogin configured, after a lot of hunting around for the correct settings for IIS (make sure you have authentication turned on for the LimitLogin virtual directory!), however I now have a query about people have been rolling out the client MSI.

The documentation says that you may need administrative rights to install the client MSI, so how can I do this through a GPO?

Any help greatly received.

Jon

[Geoff]

Install it from the machine policy.

[alonebfg]

ok i got it all installed ok i have jus re imaged some new machines ( had problems installing client did not know it need .net framework to work and xp dont come with it) but the one problem i have got is it is not detecting users now i have got no errors comming up but they are on wireless laptops i did not know if anyone has seen this issue befor??

[apeo]

Ok having a look at this and im not sure what im missing. Ive gone through the 3 setups as per the instructions and added the login/off scripts into user gpo. Tested it and it seems to be doing nothing. Is there a configuration ive missed?

Edit: Do i have to configure every use with limitlogin?, cause when I go to the Limitlogin option in AD Users and Computers every user ive checked says 'not configured for LimitLogin'. I just assumed the script would configure the users. If i have to configure every user, how do i do that? (without have to do it one by one)

[apeo]

Ok found the Bulk_LimitUserLogin.vbs script to configure LimitLogin on all users. Can someone tell me what i need to do to be able to just configure users in a certain OU. Ive looked at the script and i think all i need to do is to alter the LDAP Filter but as im not great with this kind of scripting, conformation would be nice.

[SpuffMonkey]

Once you've installed LimitLogon - a right hand click on the OU in ADUC give a LimitLogon Tasks... option

[apeo]

Thank You! Funny i really thought i tried that already but obviously not.. DUH!