Managing Session Protection Policy

What is a Session Protection Policy?

A Session Protection Policy restricts the number and types of sessions a user can have open simultaneously. With this policy, the following objectives can be achieved:

• Security: Prevent unauthorized devices from accessing user accounts.

• Performance Management: Optimize the usage of server and client machine resources.

• Prevent Uncontrolled Simultaneous Logins: Restrict account usage on multiple computers at the same time.

Creating a Session Protection Policy

To create a new Session Protection Policy in SessionLimit, follow these steps:

1. Open the SessionLimit Management Console and navigate to the Policy screen.

2. Click on Add New Policy.

3. Assign a meaningful Name to the policy.

4. Define the Restriction Rules:

   1. Set the maximum number of active sessions.

   2. Define separate limits for remote and local sessions.

5. Click Save.

Once these steps are completed, the policy will be created but not yet assigned to users.

Add New Policy

Assigning the Policy

1. Navigate to the Policy screen and locate the policy you created.

2. Click on Assign.

3. Select the users, groups, or Organizational Units (OUs) to which you want to apply the policy.

4. Confirm and activate the policy.

Assign Policy

Monitoring the Results

• In the Restrictions screen, you can view which users are affected by the active policies.

The protected/unprotected status of affected users will change automatically based on their activities and the assigned policy. It is normal for them to appear unprotected initially after the first assignment

• In the Events screen, you can monitor user login/logout activities and see multi-logon restriction events if users exceed the set limits.

• The Reports screen allows you to review historical multi-logon activities for analysis.

Events Screen

Editing the Policy

If you need to revise the defined rules, you can edit an existing policy:

1. Go to the Policy section and select the policy you want to modify.

2. Click on Edit to update session limits and session types.

3. Save the changes and monitor the policy's impact.

Monitoring the Results:

• Track the effects of the updated rules on the Events screen.

• Evaluate the impact on user experience and adjust the settings if necessary.

Changing Priority Order

If multiple policies exist, priority order determines which policy affects a user.

To Adjust Policy Priority:

1. Navigate to the Policies section.

2. In the list of existing policies, drag and drop to change the priority order.

3. The highest-priority policy overrides lower-priority ones.

Policies applied directly to a user take precedence over those applied to Groups and OUs. Similarly, Group-level policies take precedence over OU-level policies. The priority order is only effective within the same type (Groups or OUs).

1. Save the changes and observe how users are affected based on the new priority order.

Monitoring the Results:

• Review the Reports to track policy order and its impact.

• If unexpected issues arise, you can revert to the previous order.

Deleting a Policy

If a policy is no longer needed, you can delete it by following these steps:

1. Go to the Policies section and select the policy to be removed.

2. Click Delete.

3. Confirm the deletion.

4. Check active sessions and user impact.

Monitoring the Results:

• Analyze log records to observe changes after policy removal.

• Evaluate whether user sessions were affected by the deletion.

Conclusion

Managing Session Protection Policies with SessionLimit is an effective way to enhance session security and optimize server resources. By following the steps in this guide, you can create, assign, edit, and delete policies as needed. Additionally, regularly reviewing the Events screen and reports helps track the impact of changes.

Optimize session management in your organization with SessionLimit today!