Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

People in the office usually keep their workstations on during the night.

I'm planning to do a power save there so I want to make sure I'll be able to talk directly to the owner of the workstation if he leaves his machine on during the night every day. For that, I need to retrieve a list of all the workstations that are ON at a certain time, every day.

How do I do that?

share|improve this question

Not much information given, depends on your setup for complexity.

Easiest way to get a list would just be to fire up nmap as a scheduled task and see when IPs do and don't respond. Map those IPs to users and ask them.

You could also do the matching in advance and script the pinging and auto-send your email to the user if you'd like. Without environment details, the most general solution is ping sweep and look up who has which IP.

share|improve this answer
I would say NMAP is overkill. you could just ping the workstation. – Zypher Nov 24 '09 at 19:50
ping won't do the trick if someone is mean enough to block icmp requests – Anonymous Nov 24 '09 at 19:55
Zypher - "People in the office" so unless they are sharing a machine he is looking for more than one. – sparks Nov 24 '09 at 20:00
It's a Windows 2003 network with AD and all workstations have Windows XP Professional on it. Is that enough as detials? Which other environment details do you need? Let me know so I can edit the question to make it more complete. – homemdelata Nov 26 '09 at 11:17

For windows workstations the "net view" command may work for you.

share|improve this answer

Do you use DHCP? You could use a short lease time (2 hours) and check the DHCP server table for renewals that occur in the 'verboten' hours.

share|improve this answer

In my environment i would do it 1 of 2 ways.

  1. I am a Spiceworks user, so it is pretty easy to monitor and report things like boot time, when systems were/are offline, restarts and etc. Then set up a report to run every morning for offenders (ie. last boottime not between 6-9am). It may be overkill to set up a separate server, yadda yadda yadda. If you want to give it a shot, it is free at

  2. I also have a Splunk syslog server set up, and have many of my systems in the office set to send event logs to this server. With a little AD group policy you start sending shutdown and boot events to the event logs. Then set up a script to monitor who is not shutting there systems off every night.

I don't know if either one of these would help you at all, or work in your environment, it is just how I do it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.