Announcement

Collapse
No announcement yet.

locate what computers an account has logged into

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • locate what computers an account has logged into

    I have a user whose account keeps getting locked out. So i want to find every computer in the domain that is using his account, whether its him logging into a computer, a scheduled task using his account, or a share mapping.

    any tips?

  • #2
    Re: locate what computers an account has logged into

    Why don't you just use the Account Lockout Tool to determine which Domain Controller he was locked out on, search the Domain Controller Security Log for the lockout event (SOURCE: Security; Category: Account Management; EVENT ID: 644) which will tell you the "Caller Machine Name". THAT is the machine which locked the account out.

    The Account Lockout Tool will surface if you search for it on http://www.google.com/microsoft.html.

    Have fun!


    Tom
    For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

    Anything you say will be misquoted and used against you

    Comment

    Working...
    X