Limiting Logons by detecting dupe users in AD

[kentwalker]

I used to limit the student logons by restricint their home share to one user, and then testing if their home share mapped.

 

BUT this meant we had to share each home folder.

 

how about a script that ran (constantly or every minute) to look at AD to see if there is any duplicate user accounts with an active session?

 

do you think this would be easy (this is why i am asking the experts).

 

cheers

 

kent.

[FN-GM]

I used to have one put lost the bugger. All you need to do is make a logon script that creates a .txt file in a shared area. If one exists boot the user off because the script has been run before.

 

If you add a log off script to delete the text file you will be good to go.

 

We ditched this though as it was a pain when kids hit the reset button. We purchased UserLock. It is easy to setup a deploy and can do much more than limiting logon sessions. Have a look on the website for mor details

[powdarrmonkey]

Active Directory itself has no concept of user sessions, only single authentications.

[Michael]

If you want a free solution, have a search for "Limit Logon" or alternatively pay for Userlock.

[ckuntz01]

We wrote our own scrip this year that uses a SQL Database to track the user sessions and WMI to log them off when it has exceeded the limit. We used to use Limit Logon, but had many issues with the upkeep of it.

[n1wgk]

Set up a Group Policy Object, apply it to the students and set login limits there. This will be an automatic solution. You already stated that it was in Active Directory. Might as well use the free tools that are available and minimize your headaches if possible.

[ckuntz01]

Set up a Group Policy Object, apply it to the students and set login limits there. This will be an automatic solution. You already stated that it was in Active Directory. Might as well use the free tools that are available and minimize your headaches if possible.

 

Where can you set in GPO the number of concurrent logons?

[n1wgk]

 

I hadn't set up the AD Group Policy for Limit Login, I only saw the entry in the listing. When you asked me where it's set up, I realized that there's a software deployment happening and there's a VB script running that sets up the client side limit login.

 

There's an MSI that gets deployed called LimitLoginClientSetup.msi. There may be something that can be found on line that will better explain what this product does.

 

Sorry for any confusion...and I will learn to double check my sources before assuming that my predecessor actually found something useful built into AD without mods.

[cookie_monster]

Probably this

 

Utility Spotlight: Limit Login Attempts With LimitLogin