List of current logged in user and where it's coming from ...

[M. Eteum]

Hi, does WMI features allow us to show list of current user logged in
the domain and from what IP address? I've search on Microsoft site,
goggle'd and yahoo'ed and had no luck.

If anyone ever come across the info, please post it here.

Thanks

 

[Marty List]

This info is not tracked by Windows. You can query AD for a list of
machines, check each machine to see if it is online, and then query the
machine to see who is logged on.

If you want this functionality automated then you could run a script on each
computer at logon and logoff, and write the computer name, ip address,
username, etc. to a database (SQL, MSDE, etc.). Then you would have another
script or web report that queries this database.

You could also write a script that queries each domain controller's event
logs to gather the information from the account logon and logoff events.

 

[Richard]

I know this is not a WMI solution, but there's an old NT4 or Win2K Resource
Kit utility called Netwatch that will show you who is connected to a Windows
device (ie: Nt, Win2K, Win2003, WinXP, workstations or servers)


Richard Glenn
(e-mail address removed)