Melville
Member
Registered: 4th Jun 03
Location: Newcastle upon Tyne
User status: Offline
|
Ok got my server 2003 up and running but the only problem Im having is that users can log on more than once at the same time. Im sure there will be a policy for this but I just cant find it. Any one know what it is??
Cheers Mark
|
PaulW
Member
Registered: 26th Jan 03
Location: Atherton, Greater Manchester
User status: Offline
|
do you only want them to be able to log on at any one time? so no one user can log on to multiple workstations at the same time?
surely setting a per-machine restriction will be better instead of the amount of sessions, as if there computer crashes out, they'll have to wait for the session to time-out before they can log in again (which means more work for you manually terminating the session)
there is a setting in the GPO somewhere, but i cant remember off the top of my head, but as for only being alowed to log onto certain machines, thats easy
|
Melville
Member
Registered: 4th Jun 03
Location: Newcastle upon Tyne
User status: Offline
|
at them minute a user can log on twice (or more I assume) at the same time. Thing is the daft lasses in reception are using the same account on the computers (fuck knows why, they have been told on numerous occasions not to) So basically I want it so that they are forced to use there own accounts ie they all cant log on under ACCOUNT X. IF you know what I mean
|
Melville
Member
Registered: 4th Jun 03
Location: Newcastle upon Tyne
User status: Offline
|
anyone??
|
Tim
Site Administrator
Registered: 21st Apr 00
User status: Offline
|
I'd personally do the per-machine setting as Paul says... Either in permissions or group policy (GPO)...
There's no way of stopping concurrent logins, except using MS ResKit tools like CConnect (very insecure and needs SQL Server -- plus a decent dba to secure the app) or 3rd party apps like UserLock (http://www.softwareshelf.com/products/display.asp?p=42)...
|
Melville
Member
Registered: 4th Jun 03
Location: Newcastle upon Tyne
User status: Offline
|
hmmm interesting, I thought there ould have been a way to do it as it doesnt seem to like trying to save the same account twice at the same time lol
Thing is I cant set per machine up as they use the computers in different rooms sometimes as well!!!
guess I'll just have to lay down the law and refer to the network policiy agreement that they have signed lol
|
Tim
Site Administrator
Registered: 21st Apr 00
User status: Offline
|
Or buy UserLock 
And yes -- it is stupid considering roaming profiles get confused...
[Edited on 28-06-2004 by Tim]
|
PaulW
Member
Registered: 26th Jan 03
Location: Atherton, Greater Manchester
User status: Offline
|
per-machine restriction.
Go intop Active Directory Users and Computers
Select the properties for the silly woman's user account
Go into the Account tab
Click the Log On To button
Check the option saying 'The following Computers', and type the computer name which you only want her to be able to log into, and click Add and then Ok
Apply & Ok
she will now only be able to login to that 1 machine (or more if you specified multiple machines) & no others.
As far as restrictions concerning amount of logins aloud per session, I just looked through the entire GPO structure can't find it, so best with what Ian says about this UserLock thing (although I aint ever used it so he best to ask!)
[Edited on 28-06-2004 by PaulW]
|
