[windows2000] Re: Locate a where a user is logged on FAST

  • From: "Ray at work" <listray@xxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Thu, 6 May 2004 13:28:13 -0400

Here's the quick and dirty way that can be unfriendly for NT clients.

C:\>net send username ""
The message was successfully sent...

C:\>nbtstat -c

Name      Type            Host Address    Life [sec]
----------------------------------------------------
USERNAME  <03>  UNIQUE    192.168.1.100   520

(NOTE IP ADDRESS)

C:\>nbtstat -A 192.168.1.100

   Name               Type         Status
---------------------------------------------
COMPUTER10   <00>    UNIQUE      Registered


It's a three step process.

Net send "" to the user.  If the use is running Windows 2000 or higher, he
will see nothing.  NT users will see a blank net send.  The messenger
service will locate the username by finding the computer with an <03>
registration with that username.  That resolution will be stored in your
local netbios cache.  Look at that cache with the nbtstat -c command.  That
will show you the correlation between the username and the IP address.  And
then you can look at that machine's netbios table with nbtstat -A [ip] and
get its computer name <00>.

Ray at work



 

> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx 
> [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sorin Srbu
> 
> Hi all,
> 
> Is there a FAST way to locate where a user is logged on?
> Preferrably easy too. 8-)
> 
> I've tried sysinternals psloggedon, but this one is s-l-o-w, as it
> scans the entire domain...
>


********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: