Windows Forum

Ask something
Discussion Locked

ID-ing users on a network

0 helpful
5 replies

by curranjf

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I need to be able to identify each user on a network by machine by time of day, etc.

Is there a way or a program that I can use that will allow me to identify the users of each pc on my network after the user has logged off. I network a high school and there are frequent problems on pcs caused by students who may be malicious and attempting to cause problems. Also, there are those who just do not know that their actions will cause machine problems. I want to be able to identify what student was using what pc after the fact. Thanks for your help.

5 replies

by magetower

Are they actually loggin into a network domain or just the local machine?

If a domain login is being used then you should have the capability to audit the logins from the server.

If they are just logging in locally to a W95/98 box then you can look at the userID.PWD files (i.e. jones.PWD in the WINDOWS directory and see which one has the latest date/time stamp. This assumes they are not bypassing the login screen by cancelling it.

Some more details would be helpful.

enjoy

by mike o

If you're on a network where the Win95/98 clients are logging into an NT domain, you can set it to audit the logins. Go to the User Manager and select the audit policies, and click on the log in and log out options. From then on, all logins/logouts will show up in the security log of the event manager.

If you want to further secure your PCs, or if you're not using NT, I recommend Fortres101. We use it at our high school and I love it. http://www.fortres.com It's default intall is a little bit overkill, but I've found stripping all settings and starting over with only the protection I want works wonderfully.

And, if you do have an NT server, its Central Control component will allow you to see who's logged into a machine at any given time and will allow you to log them off or shut them down remotely.

This discussion is closed to new replies.