Is there a way to match an AD computer to an AD user?

[LudicrouSpeed]

Hey Guys,

I had a situation today where i needed to know who used a computer by a specific name. I know the whole concept of active directory is that anyone can use any PC but i was thinking there should be a way to at least find out who is currently logged on to a PC. Ideally there would be a history function which would state who has logged on during the past week or so.

I know naming conventions help with this sort of thing, but i dont know if its best practise to change a PC name everytime a new user is handed down an older PC.

Any ideas/thoughts?

advTHANKSance

-Ludi

 

[itsp1965]

If you don't have AD implemented, you will need to enable auditing of logons through the local security policy of each machine. You can then check the security eventlogs for logon events

 

[LudicrouSpeed]

thanks for your reply... i do have AD implemented though.

 

[itsp1965]

If this is the case, setup a GPO whereby you apply the auditing settings to all the machines in the domain. You can have the event logs for these machines exported to a central server and then you can use something like EventcombMT to scan for the logon events.

 

[LudicrouSpeed]

Thankyou itsp1965, i appreciate your help. i will look into this method.

 

[markdmac]

You can also get this info easily with vbscript.

http://www.thespidersparlor.com/products/products.htm

WhoIsLoggedInThere.vbs
Identifies what users are logged on a given PC name.

WhoIsLoggedInThereListVer.vbs
Identifies what users are logged on to a given list of computers. Requires wslist.txt for input.



I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.