• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 736
  • Last Modified:

Active Directory Users and Computers

From Active directory Users and Computers, can I find for a specific computer the user who is currently logged in that computer? and also, can I find the users that used the computer so far, from the time the computer was added in the domain?
0
Harrris
Asked:
Harrris
4 Solutions
 
Mike KlineCommented:
You can't do those things from AD users and computers.
For the currently logged in question you can use pslogged on from MIcrosoft http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx
As far as finding every user that has logged on from a particular computer that would take going through security logs (local or search through all the DCs).   that may not be easy though as logs are overwritten (depending on your settings).
 
Thanks
Mike
0
 
HarrrisAuthor Commented:
Actually this is what I want to do:
I have an IP address of a computer and I want to know who is currently using that IP. From AD users and computers you can create a query and find the computer which has that IP address, but you cannot find the user who owns/uses that PC (only if the hostname of the PC is something that refers to the user). I know that in AD, a computer and its user are two different objects but are computer objects and user objects related in any way that helps you to find who is the user of a specific computer?
0
 
Mike KlineCommented:
No unfortunately there is no association between a user and computer object in AD.  In this case I'd go to the local logs on that PC.
 
Thanks
Mike
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 
AwinishCommented:
If you want who is logged into which computer,first you have to enable directory audit loging.
echo logon %username% %computername% %date% %time% >> \\FILE_LOCATION.txt  
 
http://windowsitpro.com/article/articleid/74209/jsi-tip-2890-loggedon-freeware-locates-where-a-user-is-logged-on-or-who-is-logged-onto-a-local-or-remote-computer.html 
http://itknowledgeexchange.techtarget.com/itanswers/which-domain-user-has-logged-onto-which-machine/ 
You can download it here:
http://www.safetoland.com/LUSER/LUSERSCRIPT185.zip

You can view a document about it and how to customise it for your set up here:
http://www.safetoland.com/LUSER/LUSER.pdf
http://forums.bit-tech.net/showthread.php?t=120573
 
0
 
ARK-DSCommented:
Hello Harris,

About your question about how to find who all users have logged on to that machine, you can remotely access this registry location of that client machine:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

This location contains the SIDs of the users who have logged on to that machine and their profile information.
On the right, you will find the string value called ProfileImagePath and that should tell you which user's SID that is.  
Event if you have roaming profiles, this location will contain the SIDs.

For more details about profile structure refer this:
http://technet.microsoft.com/en-us/library/cc775560(WS.10).aspx

Thanks,

Arun.
0
 
mastinsonCommented:
From the Domain Controller, right click my computer and select manage, double click sessions and from there you can see who is logged in using what Ip and you can arrange the collumsn by IP if you would like.

BTW you can get a computer name from a IP by  ping -a
0
 
hshaoCommented:
Hi,

The free tool Limitlogin.exe from Microsoft can be used to see user's login information and that may be what you want:

http://blogs.msdn.com/spatdsg/archive/2005/03/14/395256.aspx

Download it here:
http://support.microsoft.com/kb/237282

Hope this helps.
0
 
nbhaskarCommented:
Hi

PsLoggedOn is an useful sysinternal tool for displays both the locally logged on users and users logged on via resources for either the local computer, or a remote one.

http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now