Finding logged in users and their respective IP address and/or machine name : Active directory, Microsoft, 2003, userlists

May 17, 2008 02:06am pdt

1. DevilWAH 45,350
2. uetian1707 42,104
3. RobWill 30,119
4. lrmoore 19,748
5. Johnjces 14,850
6. martin_b... 11,700
7. ebjers 10,980
8. toniur 10,800
9. Chris-Dent 8,470
10. KCTS 8,011
11. that1guy15 7,460
12. from_exp 7,000
13. lnkevin 6,750
14. OutlawSy... 5,900
15. rindi 5,304

1. uetian1707 70,126
2. RobWill 61,263
3. lrmoore 49,210
4. DevilWAH 45,550
5. Johnjces 21,350
6. pseudocyber 20,416
7. KCTS 19,409
8. giltjr 19,390
9. keith_al... 18,200
10. rindi 17,934
11. MrHusy 15,700
12. ebjers 15,230
13. toniur 14,000
14. Fatal_Ex... 13,125
15. lnkevin 11,961

05.08.2008 at 08:21AM PDT, ID: 23386392

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.9

Finding logged in users and their respective IP address and/or machine name

Zones: Network Management, Microsoft Operating Systems, Windows 2000 Active Directory

Tags: Active directory, Microsoft, 2003, userlists

This cannot be rocket science, since it was a snap to do with Novell. I need to know who is logged into a workstation by querying IP address. I'd love a utility which would return ranges of IP addresses within given spread and tell me who in my AD is **currently** logged into those machines, e.g. "192.168.200.xxx MACHINENAME username".

nbstat -A doesn't do it. God forbid MS would provide a method; any third party solutions?

Start your free trial to view this solution

Related Solutions: find username from active directory using ipaddress

Question Stats

Zone: Networking

Question Asked By: michaelheffernan

Solution Provided By: mboppe

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

05.08.2008 at 08:47AM PDT, ID: 21525747

madperk:

Use the following tool from Microsft.
http://www.microsoft.com/technet/sysinternals/utilities/psloggedon.mspx

psloggedon \\computername from the commandline will give you information about the logged on user as well as the users accessing resource shares. it will also give logon times.

05.08.2008 at 10:46AM PDT, ID: 21526866

michaelheffernan:

No, psloggedon isn't "it". In most cases on our network, remote registry access is disabled for security reasons. Besides, I know who the user with the problem is, I need to know the name of the machine they are using so I can VCN into his/her desktop w/out having them do an ipconfig to tell me the IP. I *know* AD knows who is logged into which machines w/out having to query each workstations' registry.... AD grabs this info whenever a user logs into the domain.

05.08.2008 at 11:23AM PDT, ID: 21527145

madperk:

sorry about the security measures you have in place within your organization that restricts remote registry access. Obviously i do not know about the policies and procedures implace at your business. Microsoft does not supply a tool that will do what you are trying to do. I misunderstood what you were looking for from the original question. PSLOGGEDON does work as advertised and per your request "I need to know who is logged into a workstation by querying IP address" psloggedon \\192.168.x.x will give you the logged on user. it is not the tool it is the security that is used on your network that prevents this from happening.

Since you are using VNC you may want to look at VNC neighborhood. It will scan your network for computers that have VNC running. One of the listed features states that it will identify the logged on user. its free give it a try.

http://www.sysworksoft.net/products/vncnbhood.html

Sorry for the earlier confusion.
Good luck.

05.08.2008 at 11:26AM PDT, ID: 21527176

michaelheffernan:

Thank you. The confusion is actually my poorly worded title. If the VNC tool works, that would certainly fill the bill.

05.08.2008 at 01:29PM PDT, ID: 21528183

michaelheffernan:

I tried VNCNeighborhood briefly; it is unable to see any machines except one DC and the workstation it is mounted on. Not good. I'll take a closer look at it, but am not hopeful...

05.08.2008 at 10:58PM PDT, ID: 21530627

Rank: Master

mboppe:

you can change the login script and add these lines so that when the user login you can get their IP adress.

echo %username%>\\servername\shared\test.txt
ipconfig>>c:\test.txt

05.15.2008 at 09:28AM PDT, ID: 21575442

michaelheffernan:

Madperk, thank your for the VNCNeighborhood suggestion. While it gives me a fair amount of info about VNC-enabled workstations, nowhere can I find an indication of who is actually logged into them. Besides, I'd have to query each workstation to find the user I am looking for.

05.15.2008 at 09:50AM PDT, ID: 21575711

michaelheffernan:

mboppe...I must be missing something in your suggestion. It deposits a txt file in the root of the local machine. The user name is not included. THis helps how?

Scenerio: a user emails a problem on the workstation he/she is using; short of asking him/her to read the label on the CPU to me or having him/her run ipconfig in a DOS window, how may I discover the machine address or name where he/she is sitting? How do other admins accomplish this?

05.15.2008 at 04:24PM PDT, ID: 21578752

Rank: Master

mboppe:

Sorry this what you need to add in your login script.

echo %username%>\\servername\shared\test.txt
ipconfig>>\\servername\shared\test.txt

05.15.2008 at 04:28PM PDT, ID: 21578774

michaelheffernan:

I assume that I'd use a double >> for both lines as each subsequent login would overwrite the previous text file. Okay, lemme look at that...

05.15.2008 at 04:37PM PDT, ID: 21578819

Rank: Master

mboppe:

Its not the best technique what you can do is create a log for each day and search in log for user name the line below the username tells the Ipaddress.

rem ### Set Date Format ###
FOR /f "tokens=2-4 delims=/ " %%a in ('DATE /T') do set Date=%%c-%%b-%%a
set datenow=%date%
echo %username%>>\\servername\shared\datenow.txt
ipconfig>>\\servername\shared\datenow.txt

Accepted Solution

05.15.2008 at 04:40PM PDT, ID: 21578828

michaelheffernan:

I will look at this, too. I'm thinking of just grepping out the IP address from the ipconfig output. I'm not looking to preserve the file. Ok, lemme play with it.

05.15.2008 at 05:13PM PDT, ID: 21578923

michaelheffernan:

Weeelll, I do believe this'll work. I am going to muck with it tomorrow and close this question. I do believe your suggestion will be acceptable. Thanks..

05.16.2008 at 09:28AM PDT, ID: 21584178

michaelheffernan:

Incredible (at least to me) that such a feature isn't part of AD toolset. I'd want to know who's logged in where. I'm sure others have their own solutions, but where's the aftermarket?
Thanks, mboppe.

20080236-EE-VQP-29 / EE_QW_Related_20080208