tomsyr
asked on
Identifying computer name of a logged on user
Is there a tool or command that would let me see the computer name(s) of all the computers that a given active directory domain user is logged on to?
Do you mean computers where the user is currently logged on to, or all computers where the user ever logged on to?
Do you have a login script that registeres when a user logs in?
Adding %computername% to the login script will add the information you seek.
The other option is to process the security event logs on the DC's looking for Login/Logout events 538/528 and then extracting the information dealing with the workstation from which the attempt was made.
Adding %computername% to the login script will add the information you seek.
The other option is to process the security event logs on the DC's looking for Login/Logout events 538/528 and then extracting the information dealing with the workstation from which the attempt was made.
ASKER
I am looking for the computer name that the user is currently logged on to.
In regards to the security logs, what if I have multiple DC's?
Does it log to each of them, or only the one that processed the request?
In regards to the security logs, what if I have multiple DC's?
Does it log to each of them, or only the one that processed the request?
Only the one that processed the logon show them in the security log. These logs are also pretty difficult to analyse.
You can take a look at the current sessions (in computer manager) to see the clients IP of the current sessions, but then also: this is only for the processing DC.
Do you have a file server holding the roaming profiles? You can take a look at the current sessions on this server....
You can take a look at the current sessions (in computer manager) to see the clients IP of the current sessions, but then also: this is only for the processing DC.
Do you have a file server holding the roaming profiles? You can take a look at the current sessions on this server....
What is the reason you need this? Please explain the problem at hand and maybe we can think of an alternate solution besides tracking the user sessions.
ASKER
One example is that if a user needs remote support, I can connect to them with remote desktop, vnc, proxy, etc. but in all cases, I will need either their IP or computer name. They can give that to me, but I would like to bypass having to ask them.
Another case would be a user logged into multiple PC's,and their password expiring.
What are the other PC's they are logged into.
Another case would be a user logged into multiple PC's,and their password expiring.
What are the other PC's they are logged into.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I was looking to avoid using a login script to accomplish this, but in the end, that will accomplish what I need.