# Allow log in from a unique machine

**URL:** <https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045>\
**Category:** Ignition\
**Created:** [May 26, 2020, 3:07pm UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045 "2020-05-26T15:07:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![latifa.rhandour](https://avatars.discourse-cdn.com/v4/letter/l/85e7bf/32.png) [@latifa.rhandour](https://forum.inductiveautomation.com/u/latifa.rhandour)\
**Post date:** [May 26, 2020, 3:07pm UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045/1 "2020-05-26T15:07:19Z")

</div>

Hello,

I am trying to prevent connection to Ignition client from machines outside control room. Basically, I have an operator user account and I want those credentials to work only on the 2 machines in the control room (using the hostname or IP adress) and prevent access to the client if anyone is trying to use those credentials from another location.

Is there a way to do so?

Thanks a lot!  
Latifa

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [May 26, 2020, 3:32pm UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045/2 "2020-05-26T15:32:07Z")

</div>

If these are Vision clients, you can use a client startup script to check the IP address/hostname/username combination and force an exit if not approved.

---

<div class="post-metadata">

**Author:** ![shibubalaji](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/shibubalaji/32/9165_2.png) [@shibubalaji](https://forum.inductiveautomation.com/u/shibubalaji)\
**Post date:** [May 26, 2020, 6:11pm UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045/3 "2020-05-26T18:11:26Z")

</div>

Not sure which version that you are using? Have you tried creating Security zones?

---

<div class="post-metadata">

**Author:** ![nminchin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nminchin/32/6911_2.png) [@nminchin](https://forum.inductiveautomation.com/u/nminchin)\
**Post date:** [May 26, 2020, 8:45pm UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045/4 "2020-05-26T20:45:27Z")

</div>

Can they login with any credentials at all? If not, you could do as Phil suggests but simply disable the login button and force logon of the view only user. Probably add a label as well to let them know login isn’t possible outside the control room

---

<div class="post-metadata">

**Author:** ![latifa.rhandour](https://avatars.discourse-cdn.com/v4/letter/l/85e7bf/32.png) [@latifa.rhandour](https://forum.inductiveautomation.com/u/latifa.rhandour)\
**Post date:** [May 27, 2020, 8:58am UTC](https://forum.inductiveautomation.com/t/allow-log-in-from-a-unique-machine/35045/5 "2020-05-27T08:58:25Z")

</div>

Thank you all for your answers! I’m using version 8.0.7 . I did as Phil suggested and it worked perfectly!