You would need to have auditing enabled and scrape the
event log.
A sort of so so way to see who has a connection RIGHT NOW
to the DC but not necessarily everyone who is currently logged on the network
somewhere who was authenticated by that DC is to check the current
sessions
net sessions
which must be run on the server console (directory or
through rcmd/psexec) or you can use the joeware tool netsess to do it
remotely.
joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tashildar, Dinesh (Cognizant)
Sent: Wednesday, August 04, 2004 8:30 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] AD - Authentication
How do I check, which are the users (or computers) are getting authentication from domain controller.
Let say If I give "set" command on client
side, then I can get
LOGONSERVER=\\CTSINPUNCFAA
If I want to know from CTSINPUNCFAA (Domain controller) how many/who are getting authentication, how can I find it?
Regards,
Dinesh
Tashildar
Cognizant
Technology Solutions India Pvt. Ltd.
Tel : 91-20-4062600 Extn : 3119
Vnet
: 23119
