• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 300
  • Last Modified:

Need to find a way to figure out which PC a user is logged onto.

I am trying to find a simple way to find out which PC a particular user is logged onto.  So for example, I know userA is logged onto a PC on the domain, but I have no clue which PC that is.  
0
wsstechs
Asked:
wsstechs
3 Solutions
 
LauraEHunterMVPCommented:
If you have enabled Auditing for Account logon events, go to the Security Log in Event Viewer on your Domain Controller.  Filter on event ID 680, which will give you the name of the user account and the name of the workstation that it logged on from. (This will only assist you for users who are logging on using domain accounts - if your users are logging on using local accounts, you would need to query the Security log of each individual workstation to collect this information.)

Hope this helps.

Laura E. Hunter - Microsoft MVP: Windows Server - Networking
0
 
oBdACommented:
Try Sysinternal's (now Microsoft's) PsLoggedOn: http://www.microsoft.com/technet/sysinternals/utilities/psloggedon.mspx
0
 
cdnq8Commented:
Hi,
laura i just tried your instructions, but its not showing all the users, i just saw some of the users many times, but whole company has logged in n y did i find some users only,  and yes can u tell me where to enable auditing for account logon.
Taher
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
LauraEHunterMVPCommented:
This tutorial will describe the steps needed to configure Active Directory auditing: http://www.windowsecurity.com/articles/Windows-Active-Directory-Auditing.html
0
 
bsharathCommented:
Here is the exact solution that you wanted.A script can do this...Here is a link that solved my issue by Farhan.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_22789319.html?sfQueryTermInfo=1+find+log+machin+user
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now