I have a user that was accessing a file server using the Administrator's
credentials instead of their own, visible via "net file" command. I'm trying
to find a way to associate that user/session with the remote computer's IP
of name. From their I can easily identify the actual user.

Does anybody know of a way to identify the computer of the user starting
with an open file?


TIA

"Harvey Colwell" <(E-Mail Removed)> wrote in message
news:%23FOhQ%(E-Mail Removed)...
>I have a user that was accessing a file server using the Administrator's
>credentials instead of their own, visible via "net file" command. I'm
>trying to find a way to associate that user/session with the remote
>computer's IP of name. From their I can easily identify the actual user.
>
> Does anybody know of a way to identify the computer of the user starting
> with an open file?

Not offhand, but have you changed the administrator password yet?

/Al