Results 1 to 4 of 4

Thread: How to find out logged in user remotely in AD

  1. #1

    How to find out logged in user remotely in AD

    Hey guys, I am starting a search on google now but I wanted quick help on how i can find out users currently logged on. This is in an AD environment with multiple subnets. However here are few constraints:
    I cannot use windows event logs or session manager to see who is logged on.
    My question is very specific, I need to know if there is any software / utility (preferably utility & free) that I can use to find out which user is logged on in multiple machines – around 5000.

    Thanks in advance.
    Last edited by ByTeWrangler; February 11th, 2010 at 03:21 PM.
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

  2. #2
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152
    Just curious why you cant use the admin utilities..such as session manager?/

    I use a free utility(very old version...works fine)...not sure if it will do the subnets....
    GFI Languard Network Scan v2.0... you can change the subnet...so may be able to get the info you need/?/

    Not sure if it is even available for download anymore....

    EDIT...sorry not showing the username logged in...comes up no one logged in....which I know is false

    Must be some service pack or firewall blocking access...I am not running as domain admin ..that may be the issue.

    Can you run as a domain admin??

    MLF
    Last edited by morganlefay; February 11th, 2010 at 05:35 PM.

  3. #3
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152

  4. #4
    I have domain admin privileges. What matters is I should know which user is logged in where. It can also be a particular user.

    We use an in house application that log's on every machine in the AD. Hence I cannot user the windows logs because even if I keep log size as 128 MB it usually gets filled up in a day or so.

    About the nbtstat command.. I knew about it.. But it can't do the entire IP range that’s the only hindrance. I have seen couple of similar utilities based on UNIX but they don't take in IP ranges. I found one that does take in (cant get the link right now) but doesn’t show username. It only shows share information. There is also a utility by Systeminternals but it does not work over the network.
    My objective here is to find out how many people are using a particular administrator account at that given point of time.


    PS: found the link -http://www.inetcat.org/software/nbtscan.html
    Parth Maniar,
    CISSP, CISM, CISA, SSCP

    *Thank you GOD*

    Greater the Difficulty, SWEETER the Victory.

    Believe in yourself.

Similar Threads

  1. Forensic Process and Tricks
    By Tiger Shark in forum The Security Tutorials Forum
    Replies: 3
    Last Post: January 12th, 2007, 10:44 PM
  2. Basic IRC use and administration
    By MicroBurn in forum Other Tutorials Forum
    Replies: 1
    Last Post: March 2nd, 2005, 04:31 PM
  3. Windows Server 2003, creating a user remotely.
    By AxessTerminated in forum Microsoft Security Discussions
    Replies: 12
    Last Post: September 11th, 2004, 03:06 AM
  4. Suggestions on a Tutorial Draft
    By Irongeek in forum AntiOnline's General Chit Chat
    Replies: 7
    Last Post: August 9th, 2004, 10:48 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •