I'm not completely sure but I think the [Client_machine_identification] is the lowest possible level. But it isn't enough then a user could use more than one device. I think you must combine several parameter - machine + ip + osuser + qvuser to come to the nearest solution.