Determine which AD accounts are logged onto which computers
Within a Server 2016 AD network what program, utility, or command can I run to view which Active Directory users are logged onto which computers?
If this can't be done with the native Server 2016 software utilities, power shell or command line commands, what kind of software can be purchased to do this?
If this can't be done with the native Server 2016 software utilities, power shell or command line commands, what kind of software can be purchased to do this?
Do more with
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
For a free utility, you can use PsLoggedOn, by Microsoft.
Here's a different method using WMIC:
Revised to show ComputerName,UserName:
Here's a different method using WMIC:
Revised to show ComputerName,UserName:
@echo off
setlocal
for /f "Tokens=1" %%c in ('net view /domain:"%USERDOMAIN%"^|Findstr /L /C:"\\"') do (
for /f "delims=\" %%A in ('echo %%c') do (
wmic.exe /node:%%A computersystem get name,username | find /v /i "username"
)
)
endlocal
goto :EOF
The other question you had.
If you setup login/logout scripts that registers each user, date time, computer, logon server against which it authenticated, console, logout time...
Apply to the user OU, no matter what system the user logs into, you'll have the information to query as you see fit.
Which users are loggin into a system, which system a user used, duration of time
If you setup login/logout scripts that registers each user, date time, computer, logon server against which it authenticated, console, logout time...
Apply to the user OU, no matter what system the user logs into, you'll have the information to query as you see fit.
Which users are loggin into a system, which system a user used, duration of time
You can do query to eventlog.
get-eventlog "Security" | where {$_.Message -like "*Username*" -AND "Source Network Address"} | export-csv C:\SomePath
get-eventlog "Security" | where {$_.Message -like "*Username*" -AND "Source Network Address"} | export-csv C:\SomePath
Look at the first part of this article Computer Description Update Process
https://www.experts-exchange.com/articles/30891/Automated-object-placement-using-AutoAD.html
https://www.experts-exchange.com/articles/30891/Automated-object-placement-using-AutoAD.html
Get the user profile information from the workstation itself and look for the LastAccessTime. Here is a PowerShell script: http://portal.sivarajan.com/2010/07/user-profile-and-os-info-powershell.html
Here is another logon script you can check: http://www.rlmueller.net/Logon5.htm
Free tool - Find out where your AD Users are logged on into:
https://www.corelan.be/index.php/2009/07/12/free-tool-find-where-ad-users-are-logged-on-into/
Additionally, you can check active directory auditing solutions like; Lepide and Manageengine to track what's going on with your environment.
Hope this helps!
Here is another logon script you can check: http://www.rlmueller.net/Logon5.htm
Free tool - Find out where your AD Users are logged on into:
https://www.corelan.be/index.php/2009/07/12/free-tool-find-where-ad-users-are-logged-on-into/
Additionally, you can check active directory auditing solutions like; Lepide and Manageengine to track what's going on with your environment.
Hope this helps!
Premium Content
You need an Expert Office subscription to comment.Start Free Trial