How do I set up access to a network folder for only one user?

Question

Hello!
Please help me with the following question.
The situation is as follows:
we have a domain network, Windows Server 2008 R2 and a network outside the domain. The domain network has a shared folder. From a network outside the domain, you can access a folder in the domain by using a domain account. In a network outside the domain of 10 PCs.
Only 4 users need access.
You need to limit the number of connections to the folder on behalf of the user!

Let's say there is an account Peter Ivanov-pivanov
Peter himself has already connected to the folder.
But the second connection with the same credentials from another PC should be prohibited.

The ban should be exactly on the account!

Answer 1

I have not tested this, but here is something you can try... Let's say that you have D:\Data that you have shared as Data. Change the share permissions to remove access to Peter. If the share permissions use a general name like Everyone or Domain Users, you would need to add a DENY acl to prevent Peter from accessing the share. Generally, I don't like using DENY acl's, it would be better to grant access to the user's groups that do not include Peter.

The create a second share on D:\Data and name if Data-Peter. Or Data-Peter$ if you want to hide the name from other users. In the permissions, set it so that only Peter can access the share. Set the allowed number of users to 1.

See if that stops the second PC from accessing Data-Peter.

You may run into timing issues that you will need to test. For example, If Peter maps the drive and sets it to automatically remap every time he logs on, does that count aa the "1 user" or does Peter have to access a file on the share first.. Also after a period of inactivity, does the server disconnect the "first Peter" which would then allow the second pc to connect.

This looks very much like an XY Problem. If the Peter account is allowed to access the share, why do you need to restrict it to one PC at a time?