Active Directory - Restrict User to login only one PC at a time

I want to implement a policy which is related to specific users on domain. What I want to achieve is:

If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials until he logs out from PC1.

Is it possible to create such rule and force update via Active Directory not on user properties one-by-one? I don't want to bind user to one PC just any PC but force login to only one PC at a time.

1 Answer

Active Directory doesn't provide this functionality.

You could enforce this limitation using the Technet scriptLimit concurrent logins in Active Directory, further detailed in the articleActive Directory: Limit concurrent user logins, using logon and logoff scripts with a file used as lock.

Another similar method is detailed in the articleRestrict Multiple Logins in Domain (AD), using logon and logoff batch scripts.

You could also try the very old utilityLimitLogin, although I do not know if it will work on newer versions of Windows.