Logon Script

[Ragol1]

Hello,

I use this script in a logon script to send an email letting me know someone logeed on to a server using remote desktop

Set WSHNetwork = WScript.CreateObject("WScript.Network")
strUser = ""
While strUser = ""
strUser = WSHNetwork.UserName

wend


I want to be able to add some things to it if possible.

1: The remote IP they logged on from
2: The name of the workstation they logged on from
3: the OS version they are using.

Are any one of these possible? it is saved as a VBS file

Thanks
Nick

 

[S3b]

u can use the ComputerName property, that's one thing, but i can't help u for the rest

 

[mrmovie]

one would hope that M$ would write information somewhere on the local machine which you could get a hook to
is anything written to the computers eventlog when a user logs onto it?
is there any information contained in a dos program that might be of help, im not very network techie, perhaps the ARP cache or something like that?

 

[woodhead]

Ensure Auditing is turned on
check the Security event log for event 552. This tracks a successful logon to the computer that the remote user is logged into. It gives the remote users login ID and ip address.

i.e. John doe remotes into 'Target' - ip address 1.1.1.1 from his computer.

Event 552 will show a login in 'target' bu doeJ source 1.1.1.2

Does this help?
If you have multiple computers to check, get eventcomb from Microsoft. you can 'collect' these events from multiple servers.

Woody