Entradas

Mostrando entradas de febrero, 2024

How to prevent simultaneous login with same user on Active Directory?

Imagen
 Thank to: https://abhishek.nagar.me/ Restrict Multiple Logins in Domain (AD) I have always asked this question to my colleagues as to " How do i restrict Multiple Logins in an Active Directory Setup " So here is the answer Create a file when a user login and check for such file each time the login request is received  if file exists logoff, if file is not present Login and create the file. Its that simple Below is the step by step process to achieve this using Group Policy Assumptions: Windows 2003 AD is being used //<server>/logon is shared and write access is given to everyone The Steps Step 1) Create 2 batch files in C:\WINDOWS\SYSVOL\sysvol\domain.name\scripts\logon File 1:  login.bat :: BEGIN CALLOUT A If Exist \\server\logons\%username%.txt Goto notlogon Echo %username% logged in from %computername% > \\server\logons\%username%.txt Echo %username% logged in from %computername% > \\server\logons\%computername%.txt :: END CALLOUT A Goto end :notlogon Logoff :

How to receive an alert email when SSL VPN user login successfully

Imagen
 Thank to: https://community.fortinet.com/ Description This article describes how to receive an alert email when SSL VPN user login successfully. Scope All firmware. Solution 1) Create automation for this.   2) Go to  security fabric -> automation -> create new.     3) In the trigger,  create new -> select FortiOS event log   -> event  and select the correct SSL VPN Tunnel Up entry.         4) Then select  action-> select create new-> select email  and configure as preferred.       5) After this, try to log in to SSL VPN and it will be possible to see the logs under  system events -> VPN events .       It is possible alternatively to test the automation stitch using the following command:   # diagnose automation test <name>   Contact Fortinet Support for more assistance. CLI Configuration:   # config system automation-action     edit "Admin login-logout"        set description "Admin login-logout"        set action-type email        set em