Restrict users to a single system

Question

Dear Team,

I have a domain of Windows server 2016 and all users have their roaming profile.

I can see that users are unnecessary login in multiple systems when those are not in use and it is creating uncesessary profile creation in multiple machine.

I want to restrict all users to work in a single login only and if they change their system then they will not be able to login until they log off previous login. In short, I want only single login should work at a time.

Please suggest how can I achieve this.

Thank you for your help.

Answer 1

Hello there,

The easiest way is to use the Log On To account policy in the user’s account in Active Directory (AD). Open the user’s account Properties in the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in. Select the Account tab and click Log On To. Then, click Logon Workstations, select The following computers, enter the name of the workstation you want to restrict the user to, and click Add.

How to restrict use of a computer to one domain user only

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/restrict-use-one-domain-user-only

Similar discussion here https://social.technet.microsoft.com/Forums/Lync/en-US/998cca5b-544f-4e3e-b800-4090f7253800/how-to-restrict-a-computer-to-specific-user-login-?forum=winserverDS#:~:text=Open%20the%20user's%20account%20Properties,user%20to%2C%20and%20click%20Add.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--

Answer 2

Thank you for your response and it is helpful.

However, in this case, I will have to do this setting in each and every user whereas I was looking for a global settings , if something is possible.