Active Directory - Restrict User to login only one PC at a time

Question

I want to implement a policy which is related to specific users on domain. What I want to achieve is:
If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials until he logs out from PC1.
Is it possible to create such rule and force update via Active Directory not on user properties one-by-one? I don't want to bind user to one PC just any PC but force login to only one PC at a time.

harrymc · Answer

Active Directory doesn't provide this functionality.
You could enforce this limitation using the Technet script
Limit concurrent logins in Active Directory,
further detailed in the article
Active Directory: Limit concurrent user logins,
using logon and logoff scripts with a file used as lock.
Another similar method is detailed in the article
Restrict Multiple Logins in Domain (AD),
using logon and logoff batch scripts.
You could also try the very old utility
LimitLogin,
although I do not know if it will work on newer versions of Windows.

Active Directory - Restrict User to login only one PC at a time

One Answer

Add your own answers!

Ask a Question