To be more correct, there are a number of methods that your web filtering software can use. In my last email I described one way. There are other integration agents that can be used. For example, you can use DC Agent to tie directly to the domain controllers, among other methods.
What confuses me is why you are referring to the active IP address. On the workstation, there ought to be any number of ways to determine the user logged into the machine. It may even be an environment variable. The domain controllers also keep track of login/workstation information. As does Active Directory. On Wed, Apr 11, 2012 at 5:53 PM, Brian Toscano <brian.tosc...@gmail.com>wrote: > IE and some of the browsers are able to automatically exchange the > information with your web filter. Basically it is a function of the > software rather than the OS. > > > On Wed, Apr 11, 2012 at 5:49 PM, OK Don <okd...@gmail.com> wrote: > >> Our web filter at work is AD aware, so it gets the security token from the >> windows client and knows which AD account is sending the request. We log >> all that and report Internet usage every month, by AD group. No magic >> scripts - out of the box functionality for the tool. >> >> On Wed, Apr 11, 2012 at 5:05 PM, Dan Penoff <lwb...@yahoo.com> wrote: >> >> > Here is a quandary for all of my MB computer geek buddies out there: >> > >> > Overview: An MS Active Directory domain with many thousands of users >> that >> > uses LDAP. >> > >> > Task: Using an active IP address, resolve the AD account that is >> currently >> > in use on the machine. >> > >> > >> > I can do this in a very crude fashion using command line tools like >> > nbtstat and net view. However, that approach is crude and not >> automated or >> > scriptable that I know of. >> > >> > Here is what we're attempting to determine: >> > >> > We have a web filter that keeps the kiddies safe and assures our >> > compliance with CIPA. This filter is able to determine the active user >> > account on a machine, and by doing so, filter accordingly. For >> example, I >> > can create a group that includes staff accounts only, and by applying >> that >> > filter can allow staff member access to YouTube, and at the same time >> keep >> > the kids out of it, as they have different accounts. >> > >> > How is this being done? I have to believe there is some sort of VB >> script >> > that is run at a very low level to determine the account on the machine. >> > We are trying to figure out how it does this, and if this is something >> we >> > can replicate for other purposes. >> > >> > I'm all ears.... >> > >> > Thanks in advance for any suggestions or direction. >> > >> > Dan >> > _______________________________________ >> > http://www.okiebenz.com >> > For new and used parts go to www.okiebenz.com >> > To search list archives http://www.okiebenz.com/archive/ >> > >> > To Unsubscribe or change delivery options go to: >> > http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com >> > >> >> >> >> -- >> OK Don >> 2001 ML320 >> 1992 300D 2.5T >> 1990 300D 2.5T >> 1997 Plymouth Grand Voyager >> _______________________________________ >> http://www.okiebenz.com >> For new and used parts go to www.okiebenz.com >> To search list archives http://www.okiebenz.com/archive/ >> >> To Unsubscribe or change delivery options go to: >> http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com >> > > _______________________________________ http://www.okiebenz.com For new and used parts go to www.okiebenz.com To search list archives http://www.okiebenz.com/archive/ To Unsubscribe or change delivery options go to: http://mail.okiebenz.com/mailman/listinfo/mercedes_okiebenz.com
