if you're using cookies, you can't. cookies are valid across a whole browser environment, rather than just a specific wondow.
if you're propagating the sesson id through the url instead then you can; in fact if someone logs in twice from different windows using this method there's nothing you can do to stop it happening ;-)
--
rad
