Active Directory question

[Gary Francisco]

Dears,

How do I know how many users are authenticated and actually connected to a
domain controller.

Thank you,

Gary Francisco

 

[Joe Richards [MVP]]

You really can't.

Kerberos is sessionless. You get a ticket, you use that ticket for 10 hours, it
doesn't require constant connection to the DC. In the meanwhile you could
hibernate or sleep or do whatever you want in that time frame.

You can look at who has current netbios sessions with

net sessions

 

[Gary Francisco]

Dear Joe,

Thanks for the info. My concern is that our lsass.exe memory consumption is
increasing. I am finding a root cause.

Thanks,

Gary

 

[Joe Richards [MVP]]

The AD cache is kept in LSASS memory. It is probably related to that, but here
is an article you may be interested in reading.

http://support.microsoft.com/default.aspx?scid=kb;en-us;q308356

 

[Gary Francisco]

Dear Joe,

Thank you very much. You have been very helpful

Gary