Re: Concurrent Logins

From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
Date: Thu, 22 Mar 2007 00:55:33 -0700

"BobL" <divebikebob45@xxxxxxxxxxxxxx> wrote in message
news:C480AD62-5B54-4AF9-97D0-A12387FD12FF@xxxxxxxxxxxxxxxx

By default how many concurrent logins are allowed in AD by the same user?

Can this be configured? If the answer is yes, I suspect somewhere in
group
policy.

This is neither controlled nor even tracked by AD.
Hence there are no policies related to this objective.

There are downloads from MS to address this.
Search for limitlogon or the older reskit distribution of cconnect.
Implementing these are not a minor effort.

Finally, there is an approach that may be used when one wants
to limit accounts to a single concurrent login. One uses a login
script that maps a share which is unique per account. These per
account shares are each defined to allow one connection. The
login script checks if the mapping was successful, and if not logs
off. This approach has been written up in a KB the reference for
which I do not have at hand.

Roger

.

Prev by Date: Re: Disable TCP/IP for Local Administrators
Next by Date: Re: Group Policy was applied from: Two different servers - Same site, same domain
Previous by thread: Group Policy was applied from: Two different servers - Same site, same domain
Next by thread: RE: Concurrent Logins
Index(es):
- Date
- Thread

Relevant Pages

Re: FTP problem with more than 2 users configured
... If you got 530, can't login. ... then it might be due to logon policy or account ... if you 'clone' that user to another account, ... > after the installation of Exchange Server 2003. ...
(microsoft.public.inetserver.iis.ftp)
Re: Administrator Profile corruption
... It's an interesting thought, although I presume that any user account, ... the Default Domain Policy and Default DC Policy assuming the User ... However maybe this is a clue: When I RDP into server login, ... I'm on administrator.clc.006 it just creates a new profile everytime ...
(microsoft.public.windows.server.sbs)
Re: Account lockout by outlook credential prompt?
... outlook still remembers the last login name. ... User B tries to login to his outlook profile, ... I had disabled all account lockout policy on the local security policy. ...
(microsoft.public.windowsxp.security_admin)
Re: passwords resetting upon reboot of DC
... In the default domain policy or a policy on domain level check the password policy settings and combine the needs with the password from the administrator, maybe they are different and accepted via AD reset but not during login, because to short or if you use password complexity settings it differs from the needs. ... I then login with a different account that has domain admin ...
(microsoft.public.windows.server.active_directory)
Active Directory User w/ NT Policy in NetLogon Share?
... I need to have an AD use logon to an NT machine, but lock down the NT desktop with a NT policy for that user. ... When I create an NT policy, store it in a Local NetLogon share, lockdown works for a local user, but not an AD domain user. ... Note the users AD account does run a login script, off the AD DC, specified in their account. ... Now this same account does NOT lock down if I put the NT policy in the folder holding the login script. ...
(microsoft.public.win2000.security)