Not foolproof but why not just log them in in the user table. Surely you have one by now?
There should be nothing wrong with opening multiple instances of Access (assuming they actually have the full program), just not multiple sessions by the same user in the same db?
One issue with logging in is that some people will go to any length to exit abnormally, even to the point of pulling the plug (literally). Those (ahem) miscreants will have to either
a) get a message that they're already logged in and thus resume the existing app
b) be caught doing an abnormal shutdown and requiring an admin to remove their login flag (whatever that may be), upon which after the 2nd time they are summarily hung by their eyelids and beaten until they blink.
The more we hear silence, the more we begin to think about our value in this universe.
Paraphrase of Professor Brian Cox.