lock the computer without logging off on server 2008

Hello Admins,

               I am trying to track who has locked the computer without logging off on server 2008 Active Directory Domain environment ( ID 4800 Events).

                   Can anybody help me with this.

 Thanks in Advance.
srsysdocAsked:
Who is Participating?
 
srsysdocConnect With a Mentor Author Commented:
Hi,

  Finally  I resolved my issue by forwarding events to servers and then export those events to CSV format.
0
 
jmcmunnCommented:
http://www.robvanderwoude.com/ntadmincommands.php#Cmd02

There are command line options to see who is logged into a computer.  See this page for many useful commands.

Another example here:
http://www.lambroscomputers.com/remotely-view-who-is-logged-in-from-the-command-line/

You can also log people off remotely if you need to.
0
 
w_richardCommented:
Do you want it do it manually or by an application.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
srsysdocAuthor Commented:
I am looking it manually.
0
 
McKnifeCommented:
Well... if the person has not logged off, he is still logged on and his name can be found. But how to tell a computer that is abandoned and unlocked from one that is in use?
You should deploy auto-locking after a certain amount of time instead.
0
 
srsysdocAuthor Commented:
I found the solution myself.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.