Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are using Apple Directory for internal user authentication. We want to restrict a user to login from a single machine at any one time. I have been trying to find a way to do this in Apple Directory without any luck.

Is there a way to do something similar in Snow Leopard or Lion server?

share|improve this question

I assume you mean Open Directory, not Apple Directory.

There is a check box in Workgroup Manager in the user's account. Set it to not allow simultaneous logins. This box is present in WGM on 10.3 - 10.6 I know that Lion deals with workgroups a little differently.

share|improve this answer

Yes, there is a checkbox in Workgroup Manager to restrict Lion users to not allow simultaneous login on managed computers.

  • Authenticate with diradmin or other LDAP administrator (the picture below shows the box dimmed as I was not authenticated at the time)
  • Select the user in the left pane
  • Select Advanced in the right pane
  • enable or disable the checkbox for simultaneous login as needed.

enter image description here

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.