keep a table of currently logged in users in the database - clear it out in the
Session_OnEnd event.

this should work for even a multiple IIS server environment because you're not
relying on a specific session ID to identify the user.  each time a user tries to
login, check this table - and if they're already in there - let them know they can't
log in for 20 minutes (to ensure the session has actually expired on whatever server
added the row).

hope that helps,

john

--- Vivian C <ccvivian@y...> wrote:
> I have a multiple clients and server environment. I am wondering how to 
> enforce the same user only can log on once to the server at the same time 
> in ASP?  If you have any ideas/suggestions, please let me know. Thanks!
> 
> Vivian


=====

---------------------------- 
John Pirkey 
MCSD 
http://www.stlvbug.org


__________________________________________________
Do You Yahoo!?
Yahoo! Finance - Get real-time stock quotes
http://finance.yahoo.com