Discussion Locked

finding computers that users logged onto

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Is there a way to find out all of the computers a particular user has logged onto? This is in a Windows NT domain environment. One way I know of will only find one of the computers a user has logged onto that is to go to a command prompt and
net send username any message after sending user a message at the command prompt type nbtstat -c and on the line of the username you sent a message it will show you the IP address to the computer the message was received at. The downside to this method is it will only find one of the machines the user has logged onto. I know of a program called goverlan that among other things will list all of the computers a user has logged onto but I can't afford that program and want to know if there is a better way. Thanks

2 replies

by shmaltz

Enable auditing on all Domain Controllers, and make sure it logs all logon/logoff events success as well as failure, then review the Security Event logs.

This discussion is closed to new replies.