Simpler Navigation for Servers and Operating Systems
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
Operating System - Microsoft
cancel
Showing results for 
Search instead for 
Did you mean: 

Determine the windows hosts that a user is logged into

Adam Garsha
Valued Contributor

Determine the windows hosts that a user is logged into

Is there a way to determine which windows hosts that a user is logged into? i.e. get hostnames for clients that a user is logged into at any given moment.

Assume ActiveDirectory. Assume can get necessary privileges.

Through wmic?

Thanks.
2 REPLIES
Ivan Ferreira
Honored Contributor

Re: Determine the windows hosts that a user is logged into

Maybe are betters ways to do it, but here is my tip, and it works only if you are using windows 2003.

Enable auditing of logon events and acount logon events.

Use the eventquery command with the /l security /fi filter options to obtain the data that you want.

Another thing, you can use the nbtstat -a IP_ADDRESS to know who is logged on that computer, i know that this is not what you want but just in case.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Ivan Ferreira
Honored Contributor

Re: Determine the windows hosts that a user is logged into

Also you can create views in event viewer on the domain controllers (security, right clic, new view), specifying a filter, and specify 528 as the event ID.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?