polling user information

[Dan]

I want to be able to at any given moment retrieve the following information
from my domain

User logged into the domain, where at, ip address

i.e

User Computer IP
Bob computer20 10.0.1.25


I know I can pull this information from the security event log, but there
has to be a better way.

 

[Matt Anderson]

I want to be able to at any given moment retrieve the following information
from my domain

User logged into the domain, where at, ip address

i.e

User Computer IP
Bob computer20 10.0.1.25


I know I can pull this information from the security event log, but there
has to be a better way.

Active directory is decentralized - and there could be multiple versions on
different DC's at any given time. It was not build to provide this
information. If you are looking at audit logs this isn't real time because
it doesn't account for non-graceful shutdowns of workstations.

PSLOGGEDON from sysinternals may get you some of the info you are looking
for.

Matt
MCT, MCSE

 

[Dan]

Well we are only using one domain, but I see the point. Thanks for the
information and I will look into psloggedon.
Basicly its the information that SBS 4.5 gave you in its systems manger, but
then again that wasnt AD.

Thanks

Daniel

 

[Matt Anderson]

Well we are only using one domain, but I see the point. Thanks for the
information and I will look into psloggedon.
Basicly its the information that SBS 4.5 gave you in its systems manger,
but then again that wasnt AD.

Thanks

Daniel

Glad to help.

Matt