• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 247
  • Last Modified:

Identifying computer name of a logged on user

Is there a tool or command that would let me see the computer name(s) of all the computers that a given active directory domain user is logged on to?
0
tomsyr
Asked:
tomsyr
  • 3
  • 2
  • 2
  • +1
1 Solution
 
SjoerdvWCommented:
Do you mean computers where the user is currently logged on to, or all computers where the user ever logged on to?
0
 
arnoldCommented:
Do you have a login script that registeres when a user logs in?
Adding %computername% to the login script will add the information you seek.
The other option is to process the security event logs on the DC's looking for Login/Logout events 538/528 and then extracting the information dealing with the workstation from which the attempt was made.
0
 
tomsyrAuthor Commented:
I am looking for the computer name that the user is currently logged on to.
In regards to the security logs, what if I have multiple DC's?
Does it log to each of them, or only the one that processed the request?
0
Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

 
SjoerdvWCommented:
Only the one that processed the logon show them in the security log. These logs are also pretty difficult to analyse.

You can take a look at the current sessions (in computer manager) to see the clients IP of the current sessions, but then also: this is only for the processing DC.

Do you have a file server holding the roaming profiles? You can take a look at the current sessions on this server....
0
 
abelenkiyCommented:
What is the reason you need this? Please explain the problem at hand and maybe we can think of an alternate solution besides tracking the user sessions.
0
 
tomsyrAuthor Commented:
One example is that if a user needs remote support, I can connect to them with remote desktop, vnc, proxy, etc. but in all cases, I will need either their IP or computer name. They can give that to me, but I would like to bypass having to ask them.
Another case would be a user logged into multiple PC's,and their password expiring.
What are the other PC's they are logged into.
0
 
arnoldCommented:
The user can request assistance (remote assistance) and send you the invitation via email. As long as you are on the same LAN or the two have a LAN to LAN VPN you should be able to connect and handle the other's session.
The other way is to use a login script that adds information to a central file
i.e. the login script:
@echo off
echo "User: %USERNAME% logged in on %COMPUTERNAME% at %DATE% %TIME% using sessiontype: %sessionname%" >> \\sharedservers\share\allaccessfile_write

A similar thing can be created for the logoff script.

You could configure a event log forwarding to a single system where you still would need to process the log.
http://msdn.microsoft.com/en-us/library/bb427443%28VS.85%29.aspx
0
 
tomsyrAuthor Commented:
I was looking to avoid using a login script to accomplish this, but in the end, that will accomplish what I need.
0

Featured Post

2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

  • 3
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now