Link to home
Start Free TrialLog in
Avatar of Bartley1969
Bartley1969

asked on

Finding the Physical location of an IP host on a LAN

I have been running through the computers listed in the AD and have come across one that I do not receognize. Lets say it is called PC1, if I ping it I get an ip 192.168.0.1. I can activate the "manage computer" but cannot access any fo the snap ins such as event viewer even though I'm logged on as Administrator. How do I find where this machine is and how do I gain control of it? I don't want to disable the account in case it is doing something useful.
Avatar of killbrad
killbrad
Flag of United States of America image

http://www.microsoft.com/technet/sysinternals/utilities/psloggedon.mspx

That should give you an idea of who is using it...

http://www.microsoft.com/technet/sysinternals/utilities/psexec.mspx

This should let you run stuff on it (assuming its a part of the network and you have the correct administrator
unc to it \\192.168.0.1\c$  and see whose profiles are on the machine
SOLUTION
Avatar of rsivanandan
rsivanandan
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Bartley1969
Bartley1969

ASKER

Rajesh and jburgaard thanks for your tack, definitely makes sense to get the MAC and then from the switch get the port and then trace cable physically to patch or elsewhere from there.
Now I have a question:
I have some 10 switches across the LAN (same subnet), some switches are CISCO's and rest are a mix a other brands.
Is there software/commands out there that I can install on the netowrk that will identify all the switches and then inventory the MAC's for each port on each switch?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of btassure
Incidentally 192.168.0.1 is the standard address for a router on the 192.168.0.x network. If you cant access anything on it then it might be the router...
BTW: btassure is right
Rajesh,
many thanks for that. It has the port mapper util that I'm looking for.
BTassure and Killbrad thanks for your inputs, but I needed more indepth solutioning, i.e., there are MANY switches on the network, there are subnets too etc. I want the capability of finding rogue IP's across the LAN/WAN etc.