computer (host) names agains AD login

Question

Is there any software or real-time tool i can see the computer (host) names / ip address which an AD user logged into?

You'll have to scrape event logs on all your domain controller computers to get this. For all that I've seen this asked-for I'm amazed that there isn't a product that does it. It probably wouldn't even be that difficult to write (at least, in a manner that works in a passable fashion... it's just another loose convergence multi-master database replication problem, so it has a lot of hairy edge cases). — Evan Anderson, Jan 31, 2011 at 17:04

Community · Accepted Answer · 2017-04-13 12:14:04Z

1

Good answer here from Garrett.

Add something like the following to your logon script

echo %date%,%time%,%computername%,%username% >> \\fileserver\hiddenshare$\drives.csv
net use >> \\fileserver\hiddenshare$\drives.csv

CommunityBot

1

answered May 14, 2011 at 21:54

mfinni

36.2k4 gold badges54 silver badges89 bronze badges

Add a comment |

Jim B · Accepted Answer · 2011-01-31 18:49:10Z

0

Manageengine makes a product that will do the log parsing for you, It's not realtime (but you can re-run it)

answered Jan 31, 2011 at 18:49

Jim B

24.1k4 gold badges37 silver badges60 bronze badges

Add a comment |

Demelziraptor · Accepted Answer · 2011-05-14 22:54:39Z

-2

If you're running DHCP on the AD server you can check DHCP leases - might be better than nothing.

answered May 14, 2011 at 22:54

Demelziraptor

4891 gold badge4 silver badges11 bronze badges

1

but DHCP lease never shows you the username logged into it.
– New IT Manager
May 15, 2011 at 2:29

Add a comment |

3 Answers 3