Here's a section of a CMD file I wrote to accumulate information from a client PC session. You should be able to modify it to suit your needs. rem - Checks the client PC to see if winword.exe is present rem - if so it logs the PC name and IP address in a file. find /I "%clientname%" x:\shared_files\has_word.log IF not "%ERRORLEVEL%"=="1" goto DONOT3 if not exist "\\client\c$\program files\microsoft office\office\winword.exe" goto DONOT3 qwinsta /address %winstationname% >> x:\shared_files\has_word.log DONOT3: Jan Broucinek, System Manager Arthur Rutenberg Homes, Inc. (727) 536-5900 voice (727) 536-7168 x245 direct (727) 538-9089 fax www.arhomes.com ----- Original Message ----- From: "Dirk Blose" <Dirk.Blose@xxxxxxxxxx> To: <thin@xxxxxxxxxxxxx> Sent: Monday, January 27, 2003 3:06 PM Subject: [THIN] Re: Logging a User IP Address > > > The Clientnfo.exe utility (available on thethin.net) can output the = > sessions originating ip address along with other information. However you = > would have to script it's execution and accumulation of information. > > Dirk Blose, MCSE, CCA > Lead Technical Analyst > (919) 765-4791 > dirk.blose@xxxxxxxxxx > > >>> lynch00@xxxxxxx 01/27/03 03:02PM >>> > > I'm almost sure there is a WMI control for this. Check out Charles > Washington's Scripting site. There are a few scripts for MetaFrame to > gather information on the session. > > I'm not sure if the MOM plug-ins will help, but it could be worth a > look. > > Chris > > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On > Behalf Of Eugene Herman > Sent: Monday, January 27, 2003 11:40 AM > To: thin@xxxxxxxxxxxxx=20 > Subject: [THIN] Logging a User IP Address > > > > We had an interesting issue this morning with 2 users with the Slammer =3D > virus, dialed in caused excessive congestion on the router. We found the > =3D ip addresses of the offfending users but by the time we did they must > have =3D logged off. What we know is that based on the IP aaddress it was > a dial =3D up user. > > I know you can go into the CSA screen and get information on the user > and =3D his IP address if he is connected - is there any way to log this. > > We are currently using MF 1.8 but in the next several weeks will be =3D > cutting over to a new XPeFR2 farm > > I don't think Resource Manager is designed to do this but I an mot all =3D > that famaliar with it - Any suggestions???? > > > > ************************************************************************ > * > This message, together with any attachments, is intended only for the > use of the individual or entity to which it is addressed. It may contain > information that is confidential and prohibited from disclosure. If you > are not the intended recipient, you are hereby notified that any > dissemination or copying of this message or any attachment is strictly > prohibited. If you have received this message in error, please notify > the original sender immediately by telephone or by return e-mail and > delete this message along with any attachments, from your computer. > Thank you. > ************************************************************************ > * > > ************************************************************************ > *** > This Week's Sponsor: New Wyse(R) Expedian(TM)software maximizes your > server capacity--cost-effectively. Now you can dramatically increase the > number of users on a server by as much as 40%--and reduce the number of > servers you have to manage. By optimizing memory usage, Wyse Expedian > software allows the terminal server to support more applications and > more concurrentusers. Download your 30-day free trial today at: > http://www.wyse.com/expedian/eval.cfm?promo=3DUS-Ad-0103TheThinNetNewslett= > =20 > erEM > ************************************************************************ > **** > > > For Archives, to Unsubscribe, Subscribe or=20 > set Digest or Vacation mode use the below link: > http://thethin.net/citrixlist.cfm=20 > > > ***************************************************************************= > > This Week's Sponsor: New Wyse(R) Expedian(TM)software maximizes your = > server capacity--cost-effectively. Now you can dramatically increase the = > number of users on a server by as much as 40%--and reduce the number of = > servers you have to manage. By optimizing memory usage, Wyse Expedian = > software allows the terminal server to support more applications and more = > concurrentusers. Download your 30-day free trial today at: > http://www.wyse.com/expedian/eval.cfm?promo=3DUS-Ad-0103TheThinNetNewslette= > rEM=20 > ***************************************************************************= > * > > > For Archives, to Unsubscribe, Subscribe or=20 > set Digest or Vacation mode use the below link: > http://thethin.net/citrixlist.cfm > > *************************************************************************** > This Week's Sponsor: New Wyse(R) Expedian(TM)software maximizes your server capacity--cost-effectively. Now you can dramatically increase the number of users on a server by as much as 40%--and reduce the number of servers you have to manage. By optimizing memory usage, Wyse Expedian software allows the terminal server to support more applications and more concurrentusers. Download your 30-day free trial today at: > http://www.wyse.com/expedian/eval.cfm?promo=US-Ad-0103TheThinNetNewsletterEM > **************************************************************************** > > > For Archives, to Unsubscribe, Subscribe or > set Digest or Vacation mode use the below link: > http://thethin.net/citrixlist.cfm *************************************************************************** This Week's Sponsor: New Wyse(R) Expedian(TM)software maximizes your server capacity--cost-effectively. Now you can dramatically increase the number of users on a server by as much as 40%--and reduce the number of servers you have to manage. By optimizing memory usage, Wyse Expedian software allows the terminal server to support more applications and more concurrentusers. Download your 30-day free trial today at: http://www.wyse.com/expedian/eval.cfm?promo=US-Ad-0103TheThinNetNewsletterEM **************************************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm