Re: [Hampshire] [OT] Track down a user by IP address

Top Page
Author: David Ramsden
Date:  
To: Hampshire LUG Discussion List
Subject: Re: [Hampshire] [OT] Track down a user by IP address

Reply to this message
gpg: failed to create temporary file '/var/lib/lurker/.#lk0x57b4e100.hantslug.org.uk.13453': Permission denied
gpg: keyblock resource '/var/lib/lurker/pubring.gpg': Permission denied
gpg: Signature made Tue Oct 2 13:40:16 2007 BST
gpg: using DSA key B15F69BD3454B217
gpg: Can't check signature: No public key
Alex wrote:
>

[snip]
>
>
> Err, only if the C drive is shared by that user (assuming Win. XP here).
>


C$ and ADMIN$ (which is %systemroot%) are shared by default. They are
administrative shares. The user would need to go in to Computer
Management and stop sharing C$ and ADMIN$. Assuming they were a domain
or local administrator of the machine.

Another way to find out which user is logged on to a computer is to use
"PsLoggedOn" [1]. For example, from one of our Domain Controllers
querying my workstation:

C:\PsTools>psloggedon -l -x \\192.168.10.83
loggedon v1.33 - See who's logged on
Copyright 2000-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

Users logged on locally:
     NT AUTHORITY\LOCAL SERVICE
     NT AUTHORITY\NETWORK SERVICE
     DOMAIN\dramsden
     NT AUTHORITY\SYSTEM


[1] http://www.microsoft.com/technet/sysinternals/Security/PsLoggedOn.mspx

Regards,
David.
-- 
 .''`.     David Ramsden
: :'  :    http://0wned.it/
`. `'`     PGP key ID: 3454B217 on wwwkeys.eu.pgp.net
  `-  Debian - Because it works (tm).