Dear All I have windows 2008 R2 Active directory my users are using windows XP proessional / windows 7, I want to restrict users login session at a time only one user. I noticed that in my network some users they are loggin in to multiple machines and keep left it open ...this users have some departmental shared drives data missing. i want to resitrict my users to loggin session at a time only one, if he tryies in the second machine should disconnect the first session or until he close the first session should nt login. My question is is it possible to impliment this..? is it possible to monitor how many machines users are logged at a time Apriciate your kind replays... NIYAS

Try to Install the Windows 2000 Resource Kit tool named CConnect.exe on each client computer. This tool, together with an .adm file that is supplied by the tool, ... http://support.microsoft.com/kb/237282 If you want that each user only uses his own computer to work, you can go to the computer properties and specify that. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

hi Mr X Thanks a lot you replay i read that articel it show that it is compatible for winodws 2003 , 200 NT 4.0 unfortunately my domain is windows 2008 R2, it ther is any way to manage form active directory instaed of going and installin te users

The article was written in 2007 so check if it is still available for windows server 2008 / 2008 R2 and your client computers. There is an adm file that you can find with this tool and you can use to implement group policies after the install of this tool on each PC. There is third party softwares that you can use but most of them are not free. As an example, just have a look to this one. You can also proceed like I mentioned and prevent users to logon on other client computers. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Another way out would be go to active directory select the user properites go to accounts and click the the logon to button and specify the computers names there this way you shall be able to restrict certain user loggon on to certain pc. http://www.virmansec.com/blogs/skhairuddin

Thank you all... i have downloaded this software http://www.isdecisions.com/en/software/userlock it meeting my requirements Thank you all NIYAS