Re: Locate the computer by using login ID information by Herb
Herb
Fri May 02 22:56:02 PDT 2008
"Pakeon" <Pakeon@discussions.microsoft.com> wrote in message
news:F06D8DFD-462D-4BA8-8EEC-48DF5491D692@microsoft.com...
> From the event log, I found some users sent printout to print queues. I
> want
> to know the computers from where they sent to print.
Does the computer really matter? You might get what you
really need from AUDITING the Print Queue (perhaps not).
One (ongoing issue) is that many times when auditing "user
stuff" you don't get the computer, and when auditing "computer
stuff" you don't get the user or even an IP address.
SOME of this has been improved with the addition of IP addresses
etc to various event log entries.
> Pakeon
>
> "Herb Martin" wrote:
>
>>
>> "Pakeon" <Pakeon@discussions.microsoft.com> wrote in message
>> news:B838B192-069B-4884-9781-8C09BA442616@microsoft.com...
>> > Hi,
>> >
>> > I want to know how to search for the computer name in an AD when I have
>> > only
>> > user login ID information on hand. No WINS, only DHCP and DNS. Any
>> > idea?
>>
>> What user "logon" information? User?
>>
>> Users AUTHENTICATE on the domain, and use that authentiction
>> to either LOGON or to ACCESS other resources.
>>
>> You could turn on auditing and perhaps search or view the security
>> event log depending on what you are hoping to find.
>>
>>
>>
>>