good to know - thanks Al! -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Freitag, 12. August 2005 01:02 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Limitlogin for users
<<just configure the list of workstations (I think max. 10) a user is allowed to logon to>> ...actually the limit is around 75. :-) Al Maurer Service Manager, Naming and Authentication Services IT | Information Technology Agilent Technologies (719) 590-2639; Telnet 590-2639 http://activedirectory.it.agilent.com ---------------------------------------------- A good plan today is better than a perfect plan tomorrow. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Grillenmeier, Guido Sent: Saturday, August 06, 2005 3:39 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Limitlogin for users > because some of the users are abusing their privileges The usefulnes of LimitLogon for your scenario it sort of depends what the users are doing that you consider "abuse". LimitLogon is mainly meant to hinder your users to use more concurrent logon-sessions than you'd like them to use - so if the abuse you mean is users who are merely logging onto more than one machine, this can help you. But don't forget you need to update your schema, add an app-partition and have an IIS server ready to get this whole thing to work. If your issue is that users are not ONLY logging onto SPECIFIC machines and have taken the freedom to logon to other clients they shouldn't touch, then this won't really help you, as they may still be "under quota" while logging onto these "forbidden" machines. If this is the case, then you're likely better of to restrict each user to allow logon only to specific machines - this function is built into the OS (without the need for LimitLogon) => just configure the list of workstations (I think max. 10) a user is allowed to logon to via ADUC => Account properties => Account => Log On to... This is a simple list of netbios machine-names stored in the "userworkstations" attribute of a user account (rather easy to script as well, if you don't want to add the stuff manually) /Guido -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Saleem, Mohamed Yunus Sent: Samstag, 6. August 2005 06:39 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Limitlogin for users Hi Everyone Has anyone installed and configured limitlogin. Is it difficult, did you face any problems. We are planning to limit the login sessions for users because some of the users are abusing their privileges. Thanks Mohamed This message is proprietary to Royal Commisson for Jubail and/or its customers and intended solely for the use of the individual or organisation to whom it is addressed. It may contain privileged or confidential information. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Royal commission for Jubail accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus, Trojan or [EMAIL PROTECTED] šŠV«r¯yÊ&ý§-Š÷Š¾4™¨¥iËb½çb®Šà .+w֧B+v*rz Vryi˽箊 .BövrzÊryi
