If multiple logins from different terminals is the problem, then you can deactivate the password based authentication and use SSO instead. That normally sorts it out and the "clones" come asking for their own IDs / AD accounts / PKI certs / etc.
Cheers,
Julius