I have discovered that users in my Active Directory domain can log in to their account many times parallely. I mean for example 2 machines and on each login to the same account.
Is it good? I see security concern in this way of maintaining user sessions because if someone will know password of the user then right user of account even doesn't know that someone has logged into his account. Local login wouldn't let second user log in without prompt to logout user and I think it is a good mechanism. Another thing is that work of 2 on the same account can lead to loss data saving changes to 1 synchronized file(AD).
I am trying to solve what is better: block (any way) ability to log in more than 1 time to AD account or let it be as it is for convinience reason.