Re: avoid simultaneous logons of the same user

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Michael Ströder (michael_at_stroeder.com)
Date: 10/21/04 

Date: Thu, 21 Oct 2004 09:39:36 +0200

piotr majcher wrote:
>
> but the some students give the others their usernames and
> passwords and sometime during classes i have a situation
> when there are 3 students on 3 workstations using one
> username in my classroom
>
> how can i prevent such logons?
>
> maybe the solution could be as follows:
> 1.the user1 is logging on
> 2.the user1's account is being disabled so noone else
> cannot use this username to logon to domain
> 3.the user1 is doing his work
> 4.the user1 is logging off
> 5.the user1's account is being enabled

This does not look very robust to me. What happens if you don't detect the
logout correctly, e.g. because of a machine crashing? This can lead to a
1st-level support nightnare.

I'd rather vote for an organizational than a technical solution:
If you're able to detect user1 being logged on to several work-stations you
could consider to disable user1 completely to enforce your security policy.
This would make users aware that they must not give away their credentials.

Ciao, Michael.