Bob,
I agree that a proper license management tool is needed. Certainly there could be some sort of mechanism for concurrent user access. Of course the security server could be used but then they would have to kill pass through access (blank security server in the JDE.INI). They would also need to deal with users who did not logoff properly and hung sessions.
Remember that when the OneWorld client was originally conceived, WTS was not in the picture and the license model was therefore based on named computers. (Maybe Jon Steel a.k.a altquark could give us a history lesson. He was involved with pushing WTS to JDE at that time.)
The pessimist in me says, "which is more profitable, spending development money on a license control tool or pursuing hidden bags of money after implementation with an audit tool?" But I suspect it is just a matter of development priority.
If you are not using Metrame XP or Metaframe 1.8 with a third party utility then you have no way out-of-the-box to control the number of concurrent users of published apps. So I agree that its tough to control WTS. Before Metaframe XP came out I implemented a rudimentary concurrent user enforcement utility. It was a simple script that wrapped around oexplore.exe and was published. The script logged each launch to an Access database sitting on a file server outside of the farm. The server session and process id were part of the record so that a scheduled process on each Citrix server could periodically be run (every 15 mins) on each citrix server to remove and stale or invalid records. It worked just fine.
If your license model is based on named users then things are simple -- you may not have more user profiles then the number of named users in your F0092.
I agree, counting heads is the way to go. At the end of the day we know generally how many users are using our systems, right? If you truly have a concurrent user license then I figure you should be using Metraframe XP and use the feature to limit the number concurrent users on published apps.
Regarding the audit tool, I am not sure how you request it but I have used it at a number of larger corporate clients. It is Java-based. It connects to the system via JDBC (I think) and dumps user/transaction counts into a file which can then be analysed further. I think PSoft gives the larger clients with global licenses a copy of this tool and encourages them to police themselves. I would guess it could be gotten by any licensed OneWorld site.
Regards,