Link to home
Start Free TrialLog in
Avatar of Lofty Worm
Lofty WormFlag for United States of America

asked on

How do you find an IP address from Active directory

How do you find an IP address from Active directory, given that the machine is off/old/not online, and DNS and WINS do not have entries either (the name does not match what is in AD)
SOLUTION
Avatar of polazarus
polazarus
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Paka
Paka

Need more information on this one.  DNS & NSLOOKUP are normally your first stop in chasing down a name to IP mappings.  DHCP if enabled might help.  You can also check event logs depending on what you are trying to find.
ASKER CERTIFIED SOLUTION
Avatar of tigermatt
tigermatt
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The tool goes out and queries port 137 and 138 and prints the netbios information in a space delimited format.  It will give you the ip address, user name (if logged in) and mac address.

I use it to locate machines that are hard to find.  From what I read lofty does not have the luxury of doing nslookups as the Dynamic DNS is reporting incorrect information.

When I was working enterprise admin (Tivoli) I had to create ways to hunt down endpoints that were causing problems or not communicating with the environment.

Maybe I read this wrong if so I do offer my apologies.
Avatar of Lofty Worm

ASKER

@Polazarus
Nope, you read it right, kinda.
I want to pull the info straight out of AD.  This extra tool will be useful assuming the name does not match and DNS/DHCP/WINS are all not telling me anything, but there is a legacy entry in AD I want to track down.

Take this example;
In U&C I find a computer I do not recognize, and I want to find out if it is a good system, or an old one that needs to be deleted.
DNS/DHCP/WINS all show nothing.
The machine is not being tombstoned, and does not show the red X, so, how do I track it down?
I have done the detective thing in the past, but I was hopeing that there was an easy way to do this.
I think the safest and easiest way to handle those machines is to disable the account in active directory, then wait about 3 weeks checking from time to time to see if the machine shows up.  If it does not show up then delete it.
How do you disable a machine object?
in users and computers search for the computer, right mouse click on the icon and there is an option of Disabling the account.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
sorry - you are looking for the address - i am an idiot :)
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
All these answers help with the old computer issue, but I guess the answer is more "Active Directory does not store the IP in any form"