Windows 2003 Server
(1)
VPN
(1)
Directory
(1)
Trainer
(1)
Pix
(1)
Configurable
(1)
Guarantees
(1)
Bydefault
(1)

Restrict VPN to single session

Asked By Tyler Durden
06-Feb-10 04:37 PM
How restrict users to single session on VPN? Windows 2003 Server Standard.

Thanks.

Search in this link for "How to Modify the Number of

Ace Fekay [MVP-DS, MCT] replied to Tyler Durden
07-Feb-10 06:02 PM
Search in this link for "How to Modify the Number of Simultaneous
Connections"

How to install and configure a Virtual Private Network server in ..To change
the number of simultaneous connections, follow these steps: ... Click Allow
access to grant the user permission to dial in.
http://support.microsoft.com/kb/323441

Just in case for others that have Windows 2000, search this link for "How to
Install and Enable VPN"

How To Install and Configure a Virtual Private Network Server in ...Type the
maximum number of simultaneous PPTP connections that you want ....
http://support.microsoft.com/kb/308208

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

Hi Ace, thanks, but I would like to restric users to single session; bydefault

Tyler Durden replied to Ace Fekay [MVP-DS, MCT]
07-Feb-10 07:25 PM
Hi Ace, thanks, but I would like to restric users to single session; by
default the same user can connect many times.

Oh, I see, sorry, I posted that too quickly.

Ace Fekay [MVP-DS, MCT] replied to Tyler Durden
07-Feb-10 10:57 PM
Oh, I see, sorry, I posted that too quickly.

By default, as far as I know, unless someone else has a better suggestion or
I am overlooking a setting somewhere, there is no native way to restrict a
user to one concurrent session, other than going third party. I have many
customers using Cisco ASA 5505 or a Pix 501 or Pix 506e. With those devices,
or other similar solutions, you can restrict one VPN session per user.

I also found the following if you want to pursue this with Windows RRAS.
However, my suggestion is to use a third party.

Routing and Remote Access Blog : Limit one connection to the VPN ...Jul 17,
2008 ... Hello all, I thought it would be worthwhile to blog a post
specifically on this topic. I have seen quite a number of people having this
...
http://blogs.technet.com/rrasblog/archive/2008/07/17/limit-one-connection-to-the-vpn-server-per-user.aspx

Also, not sure what RRAS is installed on, but I highly suggest to not have
it running on a DC.

Ace
Oh, is this SBS?
Ace Fekay [MVP-DS, MCT] replied to Ace Fekay [MVP-DS, MCT]
08-Feb-10 12:31 AM
Oh, is this SBS? I now realize that you have cross-posted it to the SBS group,
If it is, RRAS can run on it and is configurable with the wizard, but it is
still suggested to move it off, since it still creates a multihoming
scenario.

If not SBS, and it is a DC, I definitely suggest moving it elsewhere off a
DC.

btw - There is also the following tool, but I am not sure if it works with
RRAS.

How to Use a Network Share to Limit a User's Concurrent ...To restrict
concurrent logons for specific user accounts, use this logon script or
incorporate the script in an existing logon script. ...
http://support.microsoft.com/kb/260364

Ace
not SBS, I will try your suggestions, thanks! :)
Tyler Durden replied to Ace Fekay [MVP-DS, MCT]
08-Feb-10 08:22 AM
not SBS, I will try your suggestions, thanks! :)
Scratch that SBS thing. I misread the newsgroup lists it was going to.
Ace Fekay [MVP-DS, MCT] replied to Tyler Durden
08-Feb-10 11:57 AM
Scratch that SBS thing. I misread the newsgroup lists it was going to.

Try that idea, and let us know how it works out.

Ace
Post Question To EggHeadCafe