RE: [ActiveDir] Limit Logon thru GPO

[Mike Griffiths]

as long as you've got a well setup network Limit Logon works quite nicely. We trialled it before christmas with the intention of limiting our students, but unfortunately we could only get it to work on our staff domain - we're assuming it's because of poor design(or rather complete lack of, since the driving factor was "I just setup a 2000 server as a backup domain controller and...oh") from when we first moved over to 2000 domains.   Installation is simply a case of reading the instructions and clicking through on a 2003 domain controller with IIS installed, deploying the client & logon & logoff scripts through group policy, and running the MMC update installer on an admin machine to get the ADUC extensions. After that it pretty much integrates into ADUC for managing login quotas etc   No more of a pain than getting cconnect working properly, to be honest   If it all goes horribly wrong rolling back is (mostly) a case of re-running the installers to uninstall everything. There's a bit of manual intervention to remove the schema updates if you really want, but we just left those in and as far as most day to day administration is concerned it looks like the software was never installed.       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Visser Sent: 16 February 2006 15:59 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Limit Logon thru GPO Sorry if this question has already been asked but I was sure I saw this at one time and now I cannot find it anywhere. I am beginning to think it was all just a wishful dream.   Q. Is it possible to limit the number of logon’s a user may have at any one moment, using GPO?   Microsoft has released the LimitLogin tool, which you can download from http://download.microsoft.com/download/f/d/0/fd05def7-68a1-4f71-8546-25c359cc0842/limitlogin.exe. The tool stores logged-on information in a custom AD partition (dc=limitlogin, dc=<domain>, dc=<com>; e.g., dc=limitlogin,dc=savilltech,dc=com) via a Microsoft IIS 6.0 (Windows Server 2003) hosted Web service, a client component, and a logon and logoff script.   This is the only answer I could find on the internet but surely this cannot be the only way, like I mentioned I was sure I saw this at one time and now I cannot find it anywhere. Was it all a dream? Should MS get there act together? or did I really see this? I would rather not use LimitLogon as it seems like a bit of a pain in the a$$ to setup and I am pretty sure it is irreversible.     Thanks,     Aaron Visser   Computer Services Tech School District #33 Chilliwack Secondary School [EMAIL PROTECTED] 604.795.7295