OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: w2k logon from one computer only

From: Miroslaw Slawek Chorazy (mchorazydepaul.edu)
Date: Thu Apr 29 2004 - 10:02:21 CDT


Yes there was/is a solution in one of the Resource Kits for W2k.
The solution was based on SQL Database, old NT4 based Policy settings which you import into W2k level GPOs. But i found it very weak on the security front and abondoned it.
 
For instance, it required your SQL to be configured to allow SQL authentication and stored a password to connect to a SQL DB in clear in registry.
 
Slawek

>>> "Dinçer ÖNEL" <oneluekae.tubitak.gov.tr> 4/29/2004 02:57 >>>
Hi everybody,
Is there any GP setting or something else that restrict users from logging to a computer while he/she already logged on
from another computer in w2k domain. I need to find a way to force users log off before logon to another computer. Does
anyone heard about any MS solution for that, or 3rd party solutions (preferably MS solution).
Thanks in advance

Dincer ONEL, CISSP
Network Security Researcher
TUBITAK-UEKAE
P.K.74 41470 Gebze
Kocaeli TURKEY
Tel:+90-262-6481398
Fax:+90-262-6481100

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------