Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 382
  • Last Modified:

Want to see what computer a user is logged into

We have a Windows 2003 environment where our computer names have nothing to do with the user names.  Is there a way to run a query in active directory to see what computer a user is logged into?

0
steveLaMi
Asked:
steveLaMi
1 Solution
 
mikeleebrlaCommented:
do you have  domain setup? if so simply enable auditing of logon and logoff events and then look in your domain controller's event viewer.
0
 
jburgaardCommented:
If you have enabled auditing like mikeleebrla mention , then you also have the logon history in eventlog - eventlogS if you have more than one domaincontroller.
If you only need info regarding what is happening now, then I think running  WINS  on a server could help you out.
0
 
applesmashCommented:
Since you mentioned you use active directory, you should have a domain. Domain authentication is logged on the domain controller like Mike said. If you want more reading on auditing see
http://support.microsoft.com/kb/814595

If I understand what you are hinting at correctly, you want to find a way to see which user account is assaciated with which Computer account? The event logs on the domain controller can be quite big and hard to look through. You would want to filter/sort the security log by the associated event ID for logons (I believe it's 540 for successful network logon), and then look at user and computer entries on the same row as that event ID.

related event IDs: http://support.microsoft.com/kb/299475

Hope it helps!
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
dlangrCommented:
see http://support.microsoft.com/?KBID=175062 for ways to determine this.
0
 
jburgaardCommented:
Again asuming a WINS server in place, instead of GUI
Use Winscl to find out which computers your users are logged onto:
http://mcpmag.com/columns/article.asp?editorialsid=575
0
 
drawlinCommented:
Here is a logon script you can use: http://www.microsoft.com/technet/scriptcenter/scripts/default.mspx?mfr=true

I don't know what AV solution you are using, but if you have Symantec System Center managing AV on your network, it has a view in it that will show computer name and the user that is logged onto it.  There are lots of tools that will provide the info you are looking for.  Audit logs would be painfull to look through with out parsing them.  A SNMP tool could do it for you if SNMP is enabled on your work stations.  

If you don't have a ton of workstations and you have Admin rights to all of them, you could \\computername\C$ and look in the documents and settings folder and make a note of what user profiles are on each machine.
0
 
davidcornesCommented:
If your domain uses login scripts then why not have those write the %USERNAME% and %COMPUTERNAME% environment variables to a log file (or even database) somewhere central?
0
 
kadadi_vIT AdminCommented:
If you dont have the no of workstations then you can install the dameware NT utilities application on server or any client pc so it will give the all detials network view like servers/domains/workstations & users and there are nt utilities are built in like dns chck / tcp/tp settings/mesaging ..etc..may be it works...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now