Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


How to restrict Active Directory users from 1 device at a time login only

  • Please log in to reply
2 replies to this topic

#1 haken_zell


  • Members
  • 71 posts
  • Gender:Male
  • Local time:08:36 PM

Posted 06 October 2015 - 01:39 AM

Hi Guys,


We want to restrict our active directory users from logging in, one device at a time, meaning they cannot log in on their laptop and mobile device at the same time, the other device should be logged out. We are using Windows Server 2012 and also we have a Ruckus Controller for our WiFi Access.


Thank you :)

BC AdBot (Login to Remove)


#2 Jormeno1982


  • Members
  • 35 posts
  • Gender:Male
  • Local time:07:36 AM

Posted 04 November 2015 - 02:58 PM



I would like to get a better understanding on what you are asking. What would they be accessing on their mobile device that would be the same as their laptop? 

Don't settle for less, even a genius asks his questions. - 2pac

#3 sflatechguy


  • BC Advisor
  • 2,242 posts
  • Gender:Male
  • Local time:08:36 AM

Posted 08 November 2015 - 02:18 PM

You can use VBScripts for startup, shutdown logon and logoff to restrict users to one concurrent logon; you would have to deploy the scripts using Group Policy -- however, the devices would need to support both Visual Basic and group policy, so that pretty much restricts them to Windows tablets.


There are several third-party tools that will allow you to configure this. Microsoft's CConnect.exe worked with servers up to 2003 -- don't think it still works in 2012, and it has to be installed on each client -- so again, the limits its use for mobile devices. Microsoft's LimitLogin does pretty much the same thing, from the server side, but again, I don't think it works with anything newer than 2003.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users