General discussion

Locked

UID logged in @IP_addr? How to -?

By wil ·
There must be a combination or NBTSTAT, ARP and/or PING commands that will tell me who (UID) is logged in at x.x.x.x IP address.
The closest I can get is:
nbtstat -A <dest_ip_addr> -n
but that only gives me [00] [03] and [20] results on the NetBIOS machine name. What about some [00] and [03] results on UID?

Alternatively, do you know of any tools to accomplish such?

This conversation is currently closed to new comments.

8 total posts (Page 1 of 1)  
Thread display: Collapse - | Expand +

All Comments

Collapse -

UID logged in @IP_addr? How to -?

by curlergirl In reply to UID logged in @IP_addr? H ...

If you are using WINS, you can look at the WINS mappings and get this information from there. Other than that, I don't know of any way to dynamically get this info from the command line. Hope this helps!

Collapse -

UID logged in @IP_addr? How to -?

by wil In reply to UID logged in @IP_addr? H ...

That only correlates IP and NetBIOS and host PC name, but not user logged in. Another hit-and-miss method would be to view connections in-use in Server Manager.

Collapse -

UID logged in @IP_addr? How to -?

by McKayTech In reply to UID logged in @IP_addr? H ...

This isn't the easiest way, but if you look at the WINS database through WINS Manager and select to sort by IP address, the last entry for that particular IP address will usually be the [03] record for the last logged-in user ID.

paul

Collapse -

UID logged in @IP_addr? How to -?

by wil In reply to UID logged in @IP_addr? H ...

Yes it shows a [03] record, but that's the unique NetBIOS computer name. Generally people leave their computers on all the time.

To accomplish this I believe I will need a tool to capture DHCP ACK traffic and instantly poll the workstation as theUID [03] will still be in the cache.

Thanks for trying guys.... :-(

Collapse -

UID logged in @IP_addr? How to -?

by wil In reply to UID logged in @IP_addr? H ...

Point value changed by question poster.

Collapse -

UID logged in @IP_addr? How to -?

by schitzoid In reply to UID logged in @IP_addr? H ...

http://www.sysinternals.com/files/pstools.zip
an excellant hand full command line management tools for free, be sure to read about them at http://www.sysinternals.com/ntw2k/freeware/pstools.shtml
by the way, the one you're asking for is "psloggedon"

Collapse -

UID logged in @IP_addr? How to -?

by wil In reply to UID logged in @IP_addr? H ...

Close but didn't quite do it.

Collapse -

UID logged in @IP_addr? How to -?

by wil In reply to UID logged in @IP_addr? H ...

This question was closed by the author

Back to Windows Forum
8 total posts (Page 1 of 1)  

Related Discussions

Related Forums