Single network logon

[dubwhizz]

Allright gurus, I've got an hour before its hometime lets see how fast you guys are....

I want to restric my users to a single PC logon across the network at any one time. We run banking software and it would be dangerous to allow them to logon to more than one machine at any time. Note, I dont want to restrict them to a particular machine, cos they work in a hot-seat style.

And I'd like to know for Win2k and NT4 pls,

Any ideas?

 

[snootalope]

Are you using anykind of NOS? MS or Novell?

 

[pll7538]

You could try setting them up with roaming profiles. This would allow them to login from anywhere on the network and get access to their desktop and settings. Take a look on Microsoft Technet and check out Q article Q243420. Also search the knowledgebase on setting up roaming profiles. Hope this helps.

 

[tlcscousin]

Look in group policies for the policy that allows only one simultaneous logon.

 

[pbxman]

This requires hacking - and lots of it. It goes against the fundamentals of a resource-shared network, so the counteraction is pretty advanced. Here's what i've found:

http://www.jsiinc.com/SUBA/tip0200/rh0296.htm

I wouldn't recommend doing this at all...but it will work with some caveats.

If your users constantly switch seats..i'd recommend a shortcut to logoff on the desktop, or something to that effect. There is no "optimal" fix for your issue that i know of. Perhaps you are in a situation where setting permissions to certain objects is your better answer..for example:

user A needs access to folder X...but folder X is accessed through computer Y. So..User A goes over to computer Y to access folder X, but cannot get full access to it unles user A logs on, etc...perhaps you should rethink your group membership policy and permissions? There should be no need to force a single logon in a networked environment as it goes against the fundamentals of networking in general.

..just my 2¢
Pbxman
Systems Administrator

Please let Tek-Tips members know their posts were helpful.

 

[dubwhizz]

OK fellas, here goes.

Apparently you can log someone off via the logon script, so if they try to logon again, just kill their previous session. Not an option.

Piece of software:

http://www.flocs.com/products/maxlogon/index.htm

Have a look at the above I think that it will do what we want.

Thanks for the responses.

Dub