Active Directory Workstation Logon

Is there a way to track down what workstation or server someone is logged on to? We occasionally get someone who will log on to a workstation or server (a tech) that apparently didn’t log out. It’s possible it could have been a terminal server logonthat was just disconnected, but I can’t be sure.

What happens is that when his password expired, the session that is still open keeps using his old password and his account gets locked out.

I’d like to be able to find out all locations a user is logged into a machine if possible. Thanks!