Security

Ask something
Discussion Locked

who is on network

0 helpful
6 replies

by tony.wong

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Is there a way to find out if a user has logged on to the network, which workstation, and then a command to terminate the user's active session. Reason: sometimes we need to lay off users at short notice.

6 replies

by mrsero

Hi Tony,

It can be done manually using the following steps.
This procedure makes the following assumptions.
WINS is used
shutdown.exe from the resource kit is available

1) In User Manager for domains disable thier account.
2) Open WINS manager
3) Look in the WINS database for the users name and note the IP Address
4) From the command prompt run

NBTSTAT -A 10.10.10.10

Where 10.10.10.10 is the ip address discovered earlier.

This will return the name of the PC.

5) Using thepc name type the following command

shutdown.exe \\computer_name /T:00 "Your Fired" /C

This will shutdown the system immediately after a brief messages informs them there fired.

When they try to log on they will be denied as youve disabled thier user account. Im sure most of the above could be scripted given the additional time.

cheers

MrSero

by rumna

Hi!
I am presuming u r using windows.
There is tool networkview that is an excellent tool for scanning the network - visit www.networkview.com. Using this tool, terminating the user's active session is not possible.

There are various remote audit tools (freeware as well as shareware) that you may use. Look at www.emco.is - it may be of use to you.

cheers!!!

Ramana

This discussion is closed to new replies.