---
title: "Enforce user logon restrictions with contextual access management"
description: "Authorize, deny, or limit how a user can access your network with UserLock’s contextual access management."
locale: "en"
updated_at: "2025-11-17T14:57:42.806Z"
canonical: "https://www.isdecisions.com/en/userlock/features/enforce-user-logon-restrictions-contextual-access-management"
---

# Enforce user logon restrictions with contextual access management

Use the contextual information around a user’s logon to authorize, deny, or limit how a user can access the network, alongside multi-factor authentication (MFA).

- Ensure appropriate employee access
- Avoid frustrating end users
- Enhance security without creating work for IT

## Restrict access based on contextual factors

Go beyond existing Active Directory capabilities to easily apply customized login restrictions by user, group, or organizational unit (OU). Automatically block any logon attempts that don’t satisfy these granular access control security policies.

#### Origin

Limit access by workstation, device, IP range, organizational unit (OU), department and country.

#### Time

Limit access to specific hours, set daily, weekly, or monthly time quotas, maximum session times, and idle session time.

#### Session type

Control which sessions to allow for users (workstation, terminal, Wi-Fi, VPN, IIS, and SaaS) to protect both interactive session and network access for remote 
and mobile users.

#### Simultaneous connections

Prevent concurrent logins for a single user and limit the number of initial access points to ensure all access is attributed to a single user.

## Why implement contextual access management?

#### Enhance security

Adapt your security measures to the situation, and drastically reduce both the risk of a **data breach** and the burden on your team. Context-aware access controls are especially useful to secure remote employee access.

#### Prevent threats proactively

Identify suspicious access attempts before they escalate. UserLock’s contextual approach allows you to easily spot anomalies and take action to mitigate potential threats.

#### React in real time

Ensure access security remains intact thanks to UserLock’s real-time enforcement of context-based access restrictions.

#### Keep end users happy

Choose your own balance between security and usability, and create a seamless, efficient experience for end users.

## Deliver the right access, at the right time, to the right person

Set effective restrictions granularly to protect against unauthorized access, even if credential compromise happens.

- Set restrictions by user, group or OU
- Restrict access by machine or workstation
- Deny simultaneous connections
- Limit access to specific timeframes
- Secure VPN access to an authorized machine
- Protect any remote access
- Apply temporary controls

## View all contextual logon restrictions for specific users, groups or OUs

## Meet compliance with context-aware access controls

Demonstrate system access controls, user identity verification, shared login restrictions, and simultaneous login prevention to meet [cybersecurity compliance standards](/compliance/) and insurance requirements.

### GDPR

Address [GDPR](/compliance/gdpr) compliance to keep personal data safe

### HIPAA

Address [HIPAA](/compliance/hipaa) compliance 
to keep patient data safe

### PCI DSS

Address [PCI DSS](/compliance/pci) compliance to keep 
sensitive cardholder data safe

### Sarbanes Oxley’s

Comply with [Sarbanes Oxley’s (SOX)](/compliance/sox) 
security regulations

### ISO 27001

Address network and information 
access for [ISO 27001](/compliance/iso-27001) compliance

### NIST

Address [NIST 800-53](/compliance/nist-800-53) and [NIST 800-171](/compliance/nist-800-171) compliance to keep federal data safe

## Combine session management with context-based user access restrictions and MFA

For optimal security, use session management alongside UserLock's strong authentication and contextual access management capabilities.

#### Multi-factor authentication (MFA)

Add an extra layer of security beyond credentials to secure the initial point of access, the logon.

#### Single sign-on (SSO)

Combine SSO with MFA to quickly, securely offer access across a hybrid environment.

#### Session management

Monitor, alert and respond to all 
Active Directory user logon events.