RE: [ActiveDir] Users and Computers
Title: Message Hello Andrew, no, that's not able to extract in AD. The most popular solution for that request is to log that to a central file or database within the logon-script. Gruesse - Sincerely, Ulf B. Simon-Weidner From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Caple, AndrewSent: Wednesday, September 08, 2004 7:07 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Users and Computers Good afternoon everyone, Is it possible to extract: which user logged onto what computer through Active Directory? As both get authenticated at some point I assume that the records must be stored somewhere? Thanks, Andrew
RE: [ActiveDir] Users and Computers
While I can't get this information from Active Directory, it is possible to get this information from the domain controllers. You can look through your security logs on the domain controllers for event 540. This event will give you the user who logged on and also the ip address of the machine they logged in from. If you are using DHCP, you will have to look at your DHCP server logs to determine which hardware address was assigned to that ip address. (Luckily we reserve most of our DHCP addresses.) Dennis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ulf B. Simon-Weidner Sent: Wednesday, September 08, 2004 2:04 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Users and Computers Hello Andrew, no, that's not able to extract in AD. The most popular solution for that request is to log that to a central file or database within the logon-script. Gruesse - Sincerely, Ulf B. Simon-Weidner From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Caple, Andrew Sent: Wednesday, September 08, 2004 7:07 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Users and Computers Good afternoon everyone, Is it possible to extract: which user logged onto what computer through Active Directory? As both get authenticated at some point I assume that the records must be stored somewhere? Thanks, Andrew List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] Users and Computers
Title: Message Are you referring to "in the past"? Only by looking at security audit records or writing an app that stores the information, as other people have already said. But if you are referring to "currently logged on", you can get that: http://www.microsoft.com/technet/community/scriptcenter/user/scrug59.mspx From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Caple, AndrewSent: Wednesday, September 08, 2004 1:07 AMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Users and Computers Good afternoon everyone, Is it possible to extract: which user logged onto what computer through Active Directory? As both get authenticated at some point I assume that the records must be stored somewhere? Thanks, Andrew
RE: [ActiveDir] Users and Computers
Title: Message The below link on JSI shows a way to pull it from the DCs. http://www.jsiinc.com/SUBQ/tip8400/rh8433.htm Dave From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Caple, AndrewSent: Tuesday, September 07, 2004 10:07 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Users and Computers Good afternoon everyone, Is it possible to extract: which user logged onto what computer through Active Directory? As both get authenticated at some point I assume that the records must be stored somewhere? Thanks, Andrew
RE: [ActiveDir] Users and Computers
Title: Message Thanks everyone for your help --- it will make my life a lot easier! Andrew -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Perdue David J Contr InDyne/Enterprise ITSent: Thursday, September 09, 2004 2:00 AMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] Users and Computers The below link on JSI shows a way to pull it from the DCs. http://www.jsiinc.com/SUBQ/tip8400/rh8433.htm Dave From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Caple, AndrewSent: Tuesday, September 07, 2004 10:07 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Users and Computers Good afternoon everyone, Is it possible to extract: which user logged onto what computer through Active Directory? As both get authenticated at some point I assume that the records must be stored somewhere? Thanks, Andrew
RE: [ActiveDir] Users and Computers
Or you can download from here: http://www.microsoft.com/downloads/results.aspx?productID=freetext=adminpak.msiDisplayLang=en I believe you need the 2003 tools to admin a 2000 server from XP. nme From: Brent Westmoreland [mailto:[EMAIL PROTECTED] Sent: Thursday, May 27, 2004 6:27 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Users and Computers Install adminpak.msi available in the C:\windows\system directory of any server, also it is available on the server cd. On May 27, 2004, at 9:12 PM, Caple, Andrew wrote: I'm sure this is an easy one I'm currently setting up some Support Desk PC's and need to give them access to Users and Computers locally (so that they don't need to RDP into a DC all the time). How do you add the snap-in into a MMC with a computer that doesn't have AD installed on it? Andrew Caple Infrastructure Engineer Phone:+61 3 9861 5425 Facsimile:+61 3 9861 5510 [EMAIL PROTECTED] 105 Camberwell Road,Hawthorn East, Vic 3123 image.tiffimage.tiffimage.tiffimage.tiff
Re: [ActiveDir] Users and Computers
Install adminpak.msi available in the C:\windows\system directory of any server, also it is available on the server cd. On May 27, 2004, at 9:12 PM, Caple, Andrew wrote: I'm sure this is an easy one I'm currently setting up some Support Desk PC's and need to give them access to Users and Computers locally (so that they don't need to RDP into a DC all the time). How do you add the snap-in into a MMC with a computer that doesn't have AD installed on it? Andrew Caple x-tad-smallerInfrastructure Engineer/x-tad-smallerx-tad-smaller /x-tad-smallerx-tad-smallerPhone: +61 3 9861 5425/x-tad-smallerx-tad-smallerFacsimile: +61 3 9861 5510/x-tad-smallerx-tad-smaller[EMAIL PROTECTED]/x-tad-smallerx-tad-smaller 105 Camberwell Road, Hawthorn East, Vic 3123/x-tad-smaller image.tiff>image.tiff>image.tiff>image.tiff>
RE: [ActiveDir] Users and Computers
Title: Message Install Adminpak.msi (you'll find it in the i386 folder on the Windows200x Server CD). It will install of the admin snapins Make sure that you use the 2003 version for XP clients -Original Message-From: Caple, Andrew [mailto:[EMAIL PROTECTED]Sent: Thursday, May 27, 2004 6:12 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] Users and Computers I'm sure this is an easy one I'm currently setting up some Support Desk PC's and need to give them access to Users and Computers locally (so that they don't need to RDP into a DC all the time). How do you add the snap-in into a MMC with a computer that doesn't have AD installed on it? Andrew Caple Infrastructure Engineer Phone:+61 3 9861 5425 Facsimile:+61 3 9861 5510 [EMAIL PROTECTED] 105 Camberwell Road,Hawthorn East, Vic 3123
