Re: logon to workstations

From: Cary Shultz [A.D. MVP] (cwshultz_at_mvps.org)
Date: 01/23/05 

Date: Sat, 22 Jan 2005 21:27:20 -0500

I am not sure that there is any limit. AFAIK, I could go to each and every
computer in a 1000 computer environment and log on to each and every
computer. That is, unless there is a setting in my user account properties
limiting me to logging on to certain computers or some GPO that denies logon
locally.

Now, let's look at the two possibilities that I mentioned. These two will
limit a user to logging onto only those computer accounts specifically
mentioned in his / her user account properties -OR- prevent a user from
logging into those computer accounts that fall under the Scope of Management
of the GPO that denies the logon on locally to a specific group ( of which
the user account object in question would be a member ).

I am not sure where the limit of 60 originates. About the only 'limit'
where the number is '60' of which I have any knowledge is the tombstone time
limit. Not really sure where Jesse is getting this number.

Now, is this an answer to your question?

Or, as Ryan suggests, are you asking about a way to prevent a user from
logging into computerA and then logging into computerB ( while he / she is
still logged onto Computer! ). Both the Network Share and CConnect would be
the way to prevent this....bas per the MSKB Article that Ryan provided. 

-- 
Cary W. Shultz
Roanoke, VA  24014
Microsoft Active Directory MVP
http://www.activedirectory-win2000.com
http://www.grouppolicy-win2000.com
"Jesse" <Jesse@discussions.microsoft.com> wrote in message 
news:2112B3E2-42A8-4D90-B265-AC848F6622A0@microsoft.com...
>
>
> "Marcus Osborn" wrote:
>
>> In domain user account settings  account >> logon to >>
>> is there a limit to number of workstation accounts you can allow a user
>> account to logon to.
>
> I believe the limit is actually 60 computers.  Does anyone know how to up
> that amount?

Relevant Pages

  • Re: logon to workstations
    ... Cary and Ryan, ... We are trying to using a single domain account to logon ... to logon to the training facility workstations through the Logon Workstations ... unless there is a setting in my user account properties ...
    (microsoft.public.win2000.active_directory)
  • RE: help determining source of logon failure audits
    ... When did you turn on account logon event logging? ... This should only happen during FUS. ... Logon events is logging onto the computer. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Rejoining a domain
    ... computer is already off the domain and logging in locally and a local admin ... >> button on the logon screen and log on with a local administrator account. ... >> * PLEASE post all messages and replies in the newsgroups ...
    (microsoft.public.windowsxp.network_web)
  • RE: help determining source of logon failure audits
    ... authenticating against an account. ... Logon events is logging onto the computer. ... Error Code: 0xC000006A ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP: Cool feature with a weakness
    ... "screw with" a user even after logging out. ... As I said previously Settings stick on XP just as they do on OS X?.....WOW! ... I can, from a user account, hold down the control, option ...
    (comp.sys.mac.advocacy)