Networks

General discussion

Gravatar
Locked

Determining UID logged in @IP_addr ?

By wil ·
There must be a combination or NBTSTAT, ARP and/or PING commands that will tell me who (UID) is logged in at x.x.x.x IP address.
The closest I can get is:
nbtstat -A <dest_ip_addr> -n
but that only gives me [00] [03] and [20] results on the NetBIOS machine name. What about some [00] and [03] results on UID?
Alternatively, do you know of any tools to accomplish such?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Comments

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by Kevin.Dorrell In reply to Determining UID logged in ...

Have a look in the event log of your domain controller. Start the Eevent Viewer, select the domain controller, and select Log | security. Look for events of code 528, double-click on one, and the detail window should tell you which workstation was used.

If you want to go the other way, (i.e. "Who is logged on at a particular workstation?", then look at the security event log of the workstation in question.

Best regards,
Kevin Dorrell,
Luxembourg.

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by wil In reply to Determining UID logged in ...

Good suggestion. Iwill have to first enable "Logon and Logoff" auditing in User Manager. This will work for all workstation types - DOS, Win9x, WinNT, W2K, UNIX.
Drawbacks:
(1) Since most users leave their machines on all the time, it will take some time to accumulate this information

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by pasupathy In reply to Determining UID logged in ...

hi...
you can create a login script for u r users and use these commands in it...

echo %computername% > filename
ifconfig >>filename
echo %username% >>filename

this will give you the details of computername, i.p. address, username(logged inname)..
and later you can use that file for further statistics...
hope this works out

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by wil In reply to Determining UID logged in ...

Somewhat helpful idea. This will add additional overhead to the login process and would require managment of this file as it grows. There may even be some contention concerns. Also, you would need to determine %OS% first as the 'ipconfig' command does not work in Win9x or DOS.

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by rkelly In reply to Determining UID logged in ...

The syntax that you are using is correct (well at least it does exactly what you want on my Windows 2000 Pro machine). You must remember that you will be looking for an [03] result for the username as it is only registered for the messenger service - if you have disabled this on any workstations you will not get the results back.

You could also try looking at getting a finger service for your machines you could then use the finger command to get UID results back. Check out the follwoing URL for free finger server software for NT

http://emwac.ed.ac.uk/html/internet_toolchest/fingers/contents.htm

Hope this helps

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by rkelly In reply to Determining UID logged in ...
gravatar
Collapse -

Determining UID logged in @IP_addr ?

by wil In reply to Determining UID logged in ...

This is a good idea and I will investigate this. My concern is that this information will now be publicly available to everyone on my network. There are many UNI boxes on my network and I am concerned that the more experienced users would exploit this utility.

gravatar
Collapse -

Determining UID logged in @IP_addr ?

by wil In reply to Determining UID logged in ...

This question was closed by the author

Back to Networks Forum
8 total posts (Page 1 of 1)  

Start or search

Related Discussions

Related Forums