Multiple login restrictions??

[TheGirlInIT]

We're starting to have some real issues with the school I work in regarding network users logging into multiple stations and leaving them logged on and then other members of staff using the account. I'm just wondering if there is a way to limit users from logging on more than once at a time. The other problem is that we also use remote desktop for cloud services. We want users such as teachers to be able to log onto their classroom desktop, but also the remote desktop on their laptop if needed. So in essence, 2 logins allowed at once and if a third is attempted an auto log off on the physical computer already logged on. Ideally displaying a message to the user once logged in or on the log in screen so they are aware.

We have repeatedly told staff they need to log off or even lock their computers but it's not making much difference. In the interim we have put on a password enabled screensaver for those that continuously offend, however we want something more site wide.

 

Thoughts/advice extremely welcome!

[Andy2789]

What are you using for classroom management software across your network? Impero or anything?

[Norphy]

Windows can't do this natively. If you want to limit concurrent logons, you will need to take one of two approaches:

 

1) Install a third party piece of software such as Userlock or NetSupport DNA which can do this for you

2) Use a series of logon and logoff scripts such as this one: https://social.technet.microsoft.com/wiki/contents/articles/37839.active-directory-limit-concurrent-user-logins.aspx

 

I've used UserLock before and I'm currently using DNA. both work well. I've not tried the scripts before but I suspect they wouldn't work as well.

[TheGirlInIT]

What are you using for classroom management software across your network? Impero or anything?

 

Currently we use NetSupport on classroom student stations, however the issue we're having is also taking place on admin machines - which do not have any management software.

[Matt_NetSupport]

Currently we use NetSupport on classroom student stations, however the issue we're having is also taking place on admin machines - which do not have any management software.

 

Hi (to be transparent I do work for NetSupport),

 

I am guessing you are using NetSupport School in your classrooms, you would need NetSupport DNA to limit concurrent logins (you can choose whether to log users out of the previous session automatically or stop them from login in until they have logged out elsewhere) if you PM me I can explain in more detail and put you in touch with @Emma_NetSupport to see if we can switch you to DNA.

[caffrey]

I've been using this one for years

 

http://www.edugeek.net/forums/windows/53899-my-script-prevent-multiple-logins.html

[SamanthaD]

My old school had a tool that detected if users were logged on elsewhere, and if they were it showed them which machines were logged in and gave them the option to logoff. It was able to restrict the number of active logons by AD user group (pupils had 1, staff had 3 and I think we had 5) and there was a keyboard shortcut to bypass it if really needed... BUT I DON'T KNOW WHAT IT WAS CALLED!!! So there is a tool out there - but I can't tell you what it is!!!

[foofighterjim]

1) Install a third party piece of software such as Userlock or NetSupport DNA which can do this for you

 

Currently we use NetSupport on classroom student stations, however the issue we're having is also taking place on admin machines - which do not have any management software.

 

you would need NetSupport DNA to limit concurrent logins (you can choose whether to log users out of the previous session automatically or stop them from login in until they have logged out elsewhere)

 

Just to clear one thing up for @TheGirlInIT (@Matt_NetSupport correct me if I am wrong), we also use NetSupport DNA but it does fail in one area of your requirement. The DNA option stops concurrent logins, it does not currently provide the ability to specify the number. So you either have it on and allow one login or off allowing any number of logins, so it does not currently meet your brief. Unless there has been an update since the Summer I am unaware of, this was something I have asked for before and will be brining up again at BETT.

[Mattjones47]

@foofighterjim currently NetSupport DNA can be configured to detect an existing login and either stop the user logging in again or log them out of their previous session but we don't have the ability to configure how many logins are allowed before it rejects the next. I have spoken to the development team who have looked at the code and committed to update this for the release after 4.70 (4.70 is due to be released next week so a bit late for that one). It would be good to have a bit more understanding as to how this should be implemented - for example we could stop the user logging in for a 3rd time but would you want the option to log out a previous session to allow the 3rd session (that gets a bit more complicated as which login would we logout).

@TheGirlInIT - definitely speak to @Emma_NetSupport about upgrading to DNA (Emma will also be at Bett all week)

@SamDavis - was it Ranger for Networks (no longer available)?

 

Anyway, if your at Bett come and talk to me and give me a bit more information so we can get it right. We will definitely do something in the next release though.

 

Matt

[Matt_NetSupport]

Good afternoon,

 

Just thought I would provide an update on this thread to @foofighterjim and others who requested that NetSupport DNA included the ability to specify the number of concurrent logins allowed (currently you can stop a user logging on more than once)...

 

So, the next update to DNA (4.75) - which is due for release in the next couple of weeks will provide this flexibility.

 

Here's some screenshots:

 

Select the required profile, and choose the {Logon Control} option:

 

 

Specify the number of concurrent logins allowed (upto 5 - which we thought would cover most scenarios)

 

 

 

Once configured the end user will get prompted if they attempt to logon more times than allowed:

 

 

In the above example you can see we show the Logon time for each session to help the user determine which session the user may wish to log off in order to logon to the current device.

 

I hope that helps - there are some other exciting features in DNA 4.75 but I wanted to share the above with you as I committed to doing this earlier in the year.

[Norphy]

We're now a couple of months down the line and as far as I can see, the current version of DNA is still v4.7. Any news on this update?

[free780]

I've looked at FSLogix. If you are licenced then it prevents multiple logins. I know this doesn't help if you want to allow 2 logins. I've implemented FSLogix profile containers for RDS but not normal Windows 10.

[Matt_NetSupport]

Hi @Norphy,

 

As you may now have seen NetSupport DNA 4.75 has now been released and includes the above feature request (along with a number of other updates) - if you need help with updating etc. please contact our support team.

 

Matt