How do I find what computers a user is logged into?

How do I find what computers a user is logged into? I work in a domain
with over 80,000 users, with an equal number of computer objects, and
over 30 DC's and we get users that log themselves into a computer and
forget to logout of the computer. The next day they go to another
computer and logon and change the password for the account. Since they
did not logout of the first computer their user ID gets locked out.
So, my question is how do I find the computer they forgot to logout of?
Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
I just dated myself with that one) for the MS world to forcefully log
the user out of any computer they are on?

Thanks,
Steve

Torgeir
Thu Mar 17 10:42:31 CST 2005

steve813 wrote:

> How do I find what computers a user is logged into? I work in a domain
> with over 80,000 users, with an equal number of computer objects, and
> over 30 DC's and we get users that log themselves into a computer and
> forget to logout of the computer. The next day they go to another
> computer and logon and change the password for the account. Since they
> did not logout of the first computer their user ID gets locked out.
> So, my question is how do I find the computer they forgot to logout of?
> Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
> I just dated myself with that one) for the MS world to forcefully log
> the user out of any computer they are on?
Hi

Nothing builtin that can help you here I'm afraid, but it looks like
Microsoft is going to release something this year that supports this.

Coming from Microsoft is a product called LimitLogin (still in beta):
http://bink.nu/?ArticleID=1452



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Matt
Thu Mar 17 11:44:32 CST 2005

Actually, it's been released :)

It'll do exactly what he wants.

Here's my early look at it.

http://www.thepersonunderthestairs.com/?p=23

Matt Gibson - GSEC


"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message
news:eTYaACxKFHA.3340@TK2MSFTNGP14.phx.gbl...
> steve813 wrote:
>
>> How do I find what computers a user is logged into? I work in a domain
>> with over 80,000 users, with an equal number of computer objects, and
>> over 30 DC's and we get users that log themselves into a computer and
>> forget to logout of the computer. The next day they go to another
>> computer and logon and change the password for the account. Since they
>> did not logout of the first computer their user ID gets locked out.
>> So, my question is how do I find the computer they forgot to logout of?
>> Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
>> I just dated myself with that one) for the MS world to forcefully log
>> the user out of any computer they are on?
> Hi
>
> Nothing builtin that can help you here I'm afraid, but it looks like
> Microsoft is going to release something this year that supports this.
>
> Coming from Microsoft is a product called LimitLogin (still in beta):
> http://bink.nu/?ArticleID=1452
>
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx

Steven
Thu Mar 17 11:58:41 CST 2005

If you have auditing of account logon events enable in Domain Controller
Security Policy you might try searching the domain controller security logs
for the user name to find account logon events for success and failure and
you just may come up with the computer names. Event Comb can speed up that
process by scanning all the domain controller security logs for you.
netlogon logging should also show the information but that would be a pretty
large task in that large of a domain. SysInternals has a free tool called
PsLoggedOn that also may be worth a look at. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308471 --- Event
Comb
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en
-- where to get Event Comb and an a white paper on acount lockout problems
and how to use netlogon logging.
http://www.sysinternals.com/ntw2k/freeware/psloggedon.shtml -- psloggedon

"steve813" <steve813@gmail.com> wrote in message
news:1111076793.159891.173070@l41g2000cwc.googlegroups.com...
> How do I find what computers a user is logged into? I work in a domain
> with over 80,000 users, with an equal number of computer objects, and
> over 30 DC's and we get users that log themselves into a computer and
> forget to logout of the computer. The next day they go to another
> computer and logon and change the password for the account. Since they
> did not logout of the first computer their user ID gets locked out.
> So, my question is how do I find the computer they forgot to logout of?
> Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
> I just dated myself with that one) for the MS world to forcefully log
> the user out of any computer they are on?
>
> Thanks,
> Steve
>

Torgeir
Thu Mar 17 12:09:29 CST 2005

Matt Gibson wrote:

> Torgeir Bakken wrote:
>>
>>Nothing builtin that can help you here I'm afraid, but it looks like
>>Microsoft is going to release something this year that supports this.
>>
>>Coming from Microsoft is a product called LimitLogin (still in beta):
>>http://bink.nu/?ArticleID=1452
>>
>
> Actually, it's been released :)
>
> It'll do exactly what he wants.
>
> Here's my early look at it.
>
> http://www.thepersonunderthestairs.com/?p=23
Hi

Great :-)

Here is another article with more information, and it have a
FAQ link as well.

http://www.thincomputing.net/newsitem296.html



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

steve813
Thu Mar 17 12:25:46 CST 2005

Ahh, thanks! You got me on the right trail.

Check out
http://www.microsoft.com/downloads/details.aspx?FamilyID=d1a5ed1d-cd55-4829-a189-99515b0e90f7&DisplayLang=en

Jerold
Thu Mar 17 13:54:58 CST 2005

On 17 Mar 2005 08:26:33 -0800, "steve813" <steve813@gmail.com> wrote:

>How do I find what computers a user is logged into? I work in a domain
>with over 80,000 users, with an equal number of computer objects, and
>over 30 DC's and we get users that log themselves into a computer and
>forget to logout of the computer. The next day they go to another
>computer and logon and change the password for the account. Since they
>did not logout of the first computer their user ID gets locked out.
>So, my question is how do I find the computer they forgot to logout of?
> Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
>I just dated myself with that one) for the MS world to forcefully log
>the user out of any computer they are on?
>
>Thanks,
>Steve


In addition to LimitLogon V1.0, you might find tip 8768 in the 'Tips & Tricks' at http://www.jsiinc.com simpler.


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

Cristian
Thu Mar 17 21:32:24 CST 2005

This is a multi-part message in MIME format.

------=_NextPart_000_0035_01C52B49.92D2C260
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Steve

You can use WMI, too. If check the properties of the Win32.Computer =
Class, there is a property named "user"or something like that.

If you query the pc for this specific property, it will give you the =
logged-in user.

Before you deal with WMI, you have to download the SDK from microsoft.

Regards,

Cristian Martinez Casado


"steve813" <steve813@gmail.com> wrote in message =
news:1111076793.159891.173070@l41g2000cwc.googlegroups.com...
> How do I find what computers a user is logged into? I work in a =
domain
> with over 80,000 users, with an equal number of computer objects, and
> over 30 DC's and we get users that log themselves into a computer and
> forget to logout of the computer. The next day they go to another
> computer and logon and change the password for the account. Since =
they
> did not logout of the first computer their user ID gets locked out.
> So, my question is how do I find the computer they forgot to logout =
of?
> Or, is there a tool like the old Banyan Vines "mlogout.exe" (wow,
> I just dated myself with that one) for the MS world to forcefully log
> the user out of any computer they are on?
>=20
> Thanks,
> Steve
>
------=_NextPart_000_0035_01C52B49.92D2C260
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.2604" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>Hi Steve</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>You can use WMI, too. If check =
the=20
properties of the Win32.Computer Class, there is a property named =
"user"or=20
something like that.</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>If you query the pc for this =
specific=20
property, it will give you the logged-in user.</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>Before you deal with WMI, you =
have to=20
download the SDK from microsoft.</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>Regards,</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>Cristian Martinez =
Casado</FONT></DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Trebuchet MS" size=3D2>"steve813" &lt;</FONT><A=20
href=3D"mailto:steve813@gmail.com"><FONT face=3D"Trebuchet MS"=20
size=3D2>steve813@gmail.com</FONT></A><FONT face=3D"Trebuchet MS" =
size=3D2>&gt; wrote=20
in message </FONT><A=20
href=3D"news:1111076793.159891.173070@l41g2000cwc.googlegroups.com"><FONT=
=20
face=3D"Trebuchet MS"=20
size=3D2>news:1111076793.159891.173070@l41g2000cwc.googlegroups.com</FONT=
></A><FONT=20
face=3D"Trebuchet MS" size=3D2>...</FONT></DIV><FONT face=3D"Trebuchet =
MS" size=3D2>&gt;=20
How do I find what computers a user is logged into?&nbsp; I work in a=20
domain<BR>&gt; with over 80,000 users, with an equal number of computer =
objects,=20
and<BR>&gt; over 30 DC's and we get users that log themselves into a =
computer=20
and<BR>&gt; forget to logout of the computer.&nbsp; The next day they go =
to=20
another<BR>&gt; computer and logon and change the password for the=20
account.&nbsp; Since they<BR>&gt; did not logout of the first computer =
their=20
user ID gets locked out.<BR>&gt; So, my question is how do I find the =
computer=20
they forgot to logout of?<BR>&gt;&nbsp;Or, is there a tool like the old =
Banyan=20
Vines "mlogout.exe" (wow,<BR>&gt; I just dated myself with that one) for =
the MS=20
world to forcefully log<BR>&gt; the user out of any computer they are=20
on?<BR>&gt; <BR>&gt; Thanks,<BR>&gt; Steve<BR>&gt;</FONT></BODY></HTML>

------=_NextPart_000_0035_01C52B49.92D2C260--

Torgeir
Fri Mar 18 02:54:42 CST 2005

Cristian Martinez Casado wrote:

> Hi Steve
>
> You can use WMI, too. If check the properties of the
> Win32.Computer Class, there is a property named "user"or something
> like that.
>
> If you query the pc for this specific property, it will give you
> the logged-in user.
>
> Before you deal with WMI, you have to download the SDK from microsoft.
Hi

Note that many have reported (in the newsgroups) that this property
will be retuned as empty unless the user on the remote computer have
local admin rights....


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

steve813
Thu Mar 24 09:10:44 CST 2005

I want to thank everyone for their help. The use of LockoutStatus.exe
has helped us out alot.