logging IP address of User who authenticates with AD.

I have been tasked with building a small solution that will log the IP
address whenever an Active Directory server authenticates a User.

I know that this capability is not "built in" to Active Directory. But
is there a plugin architecture or something else I can tap into to
build this with .NET or some other programming language?

This must be a server side solution, not client side.

ZiadKChafi
Thu Mar 27 02:29:02 PDT 2008

You can enable logging using group policy, just edit the Default Domain
Controllers Policy GPO, go to Computer Management\Windows Settings\Security
Settings\Local Policies\Audit Policy and enable the Audit Logon Events (you
can choose to log successfull or unsuccessfull event) and then you can review
the logs using event viewer
--
Ziad K. Chafi
CompTIA A+, CompTIA N+, MCP, MCDST, MCAS: S, MCSE: S, MCDBA, MCTS, MCT


"mom" wrote:

> I have been tasked with building a small solution that will log the IP
> address whenever an Active Directory server authenticates a User.
>
> I know that this capability is not "built in" to Active Directory. But
> is there a plugin architecture or something else I can tap into to
> build this with .NET or some other programming language?
>
> This must be a server side solution, not client side.
>
>

Richard
Thu Mar 27 08:05:47 PDT 2008


"mom" <jamesd@ring4freedom.com> wrote in message
news:a30582e7-d32e-4ff5-bf71-6c28109996be@s50g2000hsb.googlegroups.com...
>I have been tasked with building a small solution that will log the IP
> address whenever an Active Directory server authenticates a User.
>
> I know that this capability is not "built in" to Active Directory. But
> is there a plugin architecture or something else I can tap into to
> build this with .NET or some other programming language?
>
> This must be a server side solution, not client side.
>

If it helps, I have used logon scripts to track which computers are used by
which users, including IP addresses. I have an example linked here;

http://www.rlmueller.net/Logon5.htm

This only logs the IP address if the logon script runs. If all of your
clients are newer, you can use one of the other methods linked here to
retrieve the IP address in a logon script:

http://www.rlmueller.net/PingComputers.htm

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--