?
Solved

Get Remote Computer Username

Posted on 2005-03-04
6
Medium Priority
?
3,317 Views
Last Modified: 2008-02-01
Hi,

Sorry if this is a bit long winded...

I am writing a forum for a comprehensive school.
But a few pupils will probably try to abuse it.

I want to make it posible to ban certain pupils from posting.
But, it would take too long to go through and manualy add each pupil to the database every year when new pupils come up from primary school. But if they are allowed to signup then we will never know who is who because they wont use their school username.

Although we will be able to ban them, they could just sign up again. and we wouldnt be able to speak to them about it because we wouldn't know who it was.

So, I want to know if it is possible, and if so, how to get the username that they used to log into the computer. I.e. the windows username that they are using.

Thanks in advance
mms_master
0
Comment
Question by:mms_master
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 14

Expert Comment

by:ThG
ID: 13457475

Hmm this makes me think about "The Identification Protocol", heavily used on IRC chat networks and unix, but I could never see a server implementation for windows. But I bet there is a loadable service for windows NT/2000/XP.

http://www.faqs.org/rfcs/rfc1413.html

From a quick search the following PHP implementation of RFC 413 came up this:
http://www.phpbuilder.com/snippet/detail.php?type=snippet&id=391

so assuming it is well coded, you only need the windows daemon. This is the first result i've got:
http://identd.sourceforge.net/

but unfortunately it's for old win95-based windows.

regards
0
 
LVL 18

Expert Comment

by:CrYpTiC_MauleR
ID: 13457517
Could you not get the username from Netbios? Not sure if that will be construed as hacking, but I know client-side scripts which get username are definetly considered hacking in EE's policy. The username of the currenlty logged in Windows users is suppose to be kept secret, information disclosure of such sort could lead to attacks against the user.



Regards,
Nick
0
 
LVL 25

Expert Comment

by:Marcus Bointon
ID: 13457548
I don't think you can get that info - it's protected - exposing the username would represent a fair security risk. See here:

http://p2p.wrox.com/archive/javascript/2001-05/62.asp

I'd suggest that you allow sign-ups, but make them require approval, and authenticate them by something unique to each pupil, like their mobile phone number or their login name), and only allow one username per identifier (so they can't share accounts of existing users).

OTOH, because it is a closed system, you may be able to co-ordinate with your local directory server to find out which login an IP is associated with, and similarly, you might be able to give your forum sufficient privileges to find out the local login name through Javascript or ActiveX component. Alternatively, make your login/password request page a Windows HTA, signed appropriately, which can give you much higher security clearance. Read more about them here:

http://msdn.microsoft.com/workshop/author/hta/overview/htaoverview.asp
0
 
LVL 5

Author Comment

by:mms_master
ID: 13636981
Me and a friend come accross an object which is used for RM's status reporter on comunity connect 3.

This object can be used to get the windows username for the person that is currently logged in (using VBscript). Then a form is automatically submitted by javascript, which passes the username on to php.
0
 

Accepted Solution

by:
OzzMod earned 0 total points
ID: 13670126
Closed, 50 points refunded.
OzzMod
Community Support Moderator (Graveyard shift)
0

Featured Post

Are You Using the Best Web Development Editor?

The worlds of web hosting and web development are constantly evolving. Every year we see design trends change, coding standards adapt and new frameworks/CMS created. With such a quick pace of change it’s easy to get lost trying to keep up.

See if your editor made the list.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

These days socially coordinated efforts have turned into a critical requirement for enterprises.
There are times when I have encountered the need to decompress a response from a PHP request. This is how it's done, but you must have control of the request and you can set the Accept-Encoding header.
The viewer will learn how to dynamically set the form action using jQuery.
This tutorial will teach you the core code needed to finalize the addition of a watermark to your image. The viewer will use a small PHP class to learn and create a watermark.
Suggested Courses

800 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question