Determining the last computer an account logged into
Posted on 2004-11-04
Here's a somewhat interesting problem I hope someone might have an easy solution too:
We have the standard of naming computers after their users (where possible), which makes it easy to group them in departmental OU's and such. Recently at my work there has been some high turnover, and techs have been somewhat lax in renaming computers to reflect the actual person that is using the machine. For example, you might have a machine named "juserxp", even though Joe User quit 3 months ago, and now Sally Snide is now using the machine.
Using the usrstat.exe program in the Resource Kit, I can of course determine the last login of a particular user, but so far have not found a way to determine which machine the user logged into. Security Event Log would reveal this information I imagine, and if I have too I thought about writing a login script that writes the machine name to a text file somewhere at login, but I'm looking for a more "on the fly" solution. A script or tool that could be run at my console command prompt perhaps.
Longshot I suppose, but if anyone has any ideas I would appreciate it.