Who logged in?

[Sarah G.]

Hi,
Is there any way that I can monitor who is logging in the computer?
We aer using windows 2000 servers and 2000 pro/xp

Thanks,
Sarah

 

[Pegasus \(MVP\)]

Hi,
Is there any way that I can monitor who is logging in the computer?
We aer using windows 2000 servers and 2000 pro/xp

Thanks,
Sarah

Did you consider physically looking at the person who
is logging in? Jokes aside, if you want a precise answer
then you need to reword your question. Do you mean:
- Who has connected to a local share?
- Who has started a Remote Desktop session?
- Who has a VPN connection?
- Who runs a psexec Command Prompt?
- Who logged in yesterday?
- Something entirely different?

 

[Jerold Schulman]

Hi,
Is there any way that I can monitor who is logging in the computer?
We aer using windows 2000 servers and 2000 pro/xp

Thanks,
Sarah

See tip 4001 in the 'Tips & Tricks' at http://www.jsiinc.com

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com

 

[Sarah G.]

I need to know who is logged in this computer at the moment within the LAN.
In another words, who is using this computer? Whose NT id is showing up?

Thanks,
Sarah

 

[William W. Plummer]

Maybe a netstat -a will provide some useful info.

 

[Pegasus \(MVP\)]

The obvious answer is: Look him/her in the face. Since this
is too obvious, I assume that you wish to find out who is
using a certain PC, without physically going to that PC.
If this assumption is correct then you could use psexec
from www.sysinternals.com to execute this batch file
on the remote machine:

@echo off
set user=Nobody
cd /d "c:\documents and settings"
for /d %%a in (*.*) do (
xcopy /h /y "%%a\ntuser.dat.log" %temp% 1>nul 2>%temp%\user.tmp
find /i "violation" %temp%\user.tmp > nul && set user=%%a
)
echo The current user is %user%.

 

[Sarah G.]

Hi,

Some time you can tell who is using this PC by looking at his/her face, but
some time you cannot when this user is using someone else 's ID for some
reason, right?
That's why I want to find out if there is a way to give me a current status
who is logged in which computer like

computer name userid logged in

Thanks,
Sarah

 

[Sarah G.]

After navigating the web, I found out the best solution for me.

On the server, type 'compmgmt.msc' in the run dialogue (without quotations)

Click shared folders then sessions. That'll show you anyone connected to
your server

Thanks everybody for your idea.
Sarah