[windows2000] Re: Locate a where a user is logged on FAST

  • From: "Ray at work" <listray@xxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Thu, 6 May 2004 14:05:16 -0400

Yeah, that's pretty much what my net send is doing.  It's just that you can
do the net send thing much faster.  [:

Ray at work 

> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx 
> [mailto:windows2000-bounce@xxxxxxxxxxxxx] 
> Sent: Thursday, May 06, 2004 1:53 PM
> To: windows2000@xxxxxxxxxxxxx
> Subject: [windows2000] Re: Locate a where a user is logged on FAST
> 
> Or just use your WINS management console to look for the username...
> 
> This is only going to be the first computer that he logged on 
> to though.  Assuming that yesterday's records are tombstoned 
> already...
> 
> Glenn Sullivan, MCSE+I  MCDBA
> David Clark Company Inc. 
> 
> -----Original Message-----
> From: windows2000-bounce@xxxxxxxxxxxxx
> [mailto:windows2000-bounce@xxxxxxxxxxxxx]On Behalf Of Ray at work
> Posted At: Thursday, May 06, 2004 1:28 PM
> Posted To: Windows 2000
> Conversation: [windows2000] Re: Locate a where a user is 
> logged on FAST
> Subject: [windows2000] Re: Locate a where a user is logged on FAST
> 
> 
> Here's the quick and dirty way that can be unfriendly for NT clients.
> 
> C:\>net send username ""
> The message was successfully sent...
> 
> C:\>nbtstat -c
> 
> Name      Type            Host Address    Life [sec]
> ----------------------------------------------------
> USERNAME  <03>  UNIQUE    192.168.1.100   520
> 
> (NOTE IP ADDRESS)
> 
> C:\>nbtstat -A 192.168.1.100
> 
>    Name               Type         Status
> ---------------------------------------------
> COMPUTER10   <00>    UNIQUE      Registered
> 
> 
> It's a three step process.
> 
> Net send "" to the user.  If the use is running Windows 2000 
> or higher, he
> will see nothing.  NT users will see a blank net send.  The messenger
> service will locate the username by finding the computer with an <03>
> registration with that username.  That resolution will be 
> stored in your
> local netbios cache.  Look at that cache with the nbtstat -c 
> command.  That
> will show you the correlation between the username and the IP 
> address.  And
> then you can look at that machine's netbios table with 
> nbtstat -A [ip] and
> get its computer name <00>.
> 
> Ray at work
> 
> 
> 
>  
> 
> > -----Original Message-----
> > From: windows2000-bounce@xxxxxxxxxxxxx 
> > [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Sorin Srbu
> > 
> > Hi all,
> > 
> > Is there a FAST way to locate where a user is logged on?
> > Preferrably easy too. 8-)
> > 
> > I've tried sysinternals psloggedon, but this one is s-l-o-w, as it
> > scans the entire domain...
> >
> 
> 
> ********************************************************
> This Weeks Sponsor StressedPuppy.com Games
> Feeling stressed out? Check out our games to
> relieve your stress.
> http://www.StressedPuppy.com
> ********************************************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
> 
> http://thethin.net/win2000list.cfm
> ********************************************************
> This Weeks Sponsor StressedPuppy.com Games
> Feeling stressed out? Check out our games to
> relieve your stress.
> http://www.StressedPuppy.com
> ********************************************************
> To Unsubscribe, set digest or vacation
> mode or view archives use the below link.
> 
> http://thethin.net/win2000list.cfm
> 


********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: