Windows Forum

Ask something
Discussion Locked

UID logged in @IP_addr? How to -?

0 helpful
8 replies

by wil

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

There must be a combination or NBTSTAT, ARP and/or PING commands that will tell me who (UID) is logged in at x.x.x.x IP address.
The closest I can get is:
nbtstat -A -n
but that only gives me [00] [03] and [20] results on the NetBIOS machine name. What about some [00] and [03] results on UID?

Alternatively, do you know of any tools to accomplish such?

8 replies

by curlergirl

If you are using WINS, you can look at the WINS mappings and get this information from there. Other than that, I don't know of any way to dynamically get this info from the command line. Hope this helps!

by wil

That only correlates IP and NetBIOS and host PC name, but not user logged in. Another hit-and-miss method would be to view connections in-use in Server Manager.

by mckaytech

This isn't the easiest way, but if you look at the WINS database through WINS Manager and select to sort by IP address, the last entry for that particular IP address will usually be the [03] record for the last logged-in user ID.

paul

by wil

Yes it shows a [03] record, but that's the unique NetBIOS computer name. Generally people leave their computers on all the time.

To accomplish this I believe I will need a tool to capture DHCP ACK traffic and instantly poll the workstation as theUID [03] will still be in the cache.

Thanks for trying guys.... :-(

This discussion is closed to new replies.