If you want to check which user is loggedon on to a PC or PCs in your windows domain, use the tool psloggedon from Russinovich. (Microsoft Windows User Management).Download it from Microsoft’s page:
http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx
and copy it to your %windows%system32 path. Remember that you must be an administrator on the PC or remote system.
C:\Documents and Settings\Admin>psloggedon batman
loggedon v1.33 - See who's logged on
Copyright ⌐ 2000-2006 Mark Russinovich
Sysinternals - www.sysinternals.com
RD\batman logged onto PC05 remotely.
RD\batman logged onto PC04 remotely.
RD\batman logged onto PC07 remotely.
RD\batman logged onto MYPC locally.
RD\batman logged onto S01 remotely.
RD\batman logged onto S02 remotely.
Let's see who is now remotely logged on PC08
C:\>psloggedon \\PC08
loggedon v1.33 - See who's logged on
Copyright ⌐ 2000-2006 Mark Russinovich
Sysinternals - www.sysinternals.com
Users logged on locally:
Error: could not retrieve logon time
NT AUTHORITY\SERVICIO LOCAL
Error: could not retrieve logon time
NT AUTHORITY\Servicio de red
06-Mar-2009 6:58:31 AM CONTOSO\intruder
Error: could not retrieve logon time
NT AUTHORITY\SYSTEM
Users logged on via resource shares:
06-Mar-2009 12:05:28 PM CONTOSO\Admin
we find the user "intruder", loggedon the remote system
No comments:
Post a Comment