I have domain admin privileges. What matters is I should know which user is logged in where. It can also be a particular user.

We use an in house application that log's on every machine in the AD. Hence I cannot user the windows logs because even if I keep log size as 128 MB it usually gets filled up in a day or so.

About the nbtstat command.. I knew about it.. But it can't do the entire IP range that’s the only hindrance. I have seen couple of similar utilities based on UNIX but they don't take in IP ranges. I found one that does take in (cant get the link right now) but doesn’t show username. It only shows share information. There is also a utility by Systeminternals but it does not work over the network.
My objective here is to find out how many people are using a particular administrator account at that given point of time.


PS: found the link -http://www.inetcat.org/software/nbtscan.html