Thanks for all the advice gentleman, as sods law would have it, a few minutes
after posting the message the unknown user shot himself in the foot. He
logged onto the terminal server and then disconnected himself as opposed to
logging off (disconnecting leaves you still running on the sever) so I was
able to get the IP address linked to the user on the given PC, have a nice
screen grab and it was who I thought it was.
Getting access to the guys PC is difficult, I live 140 miles away from the
site and only there one day a week. He is always there when I am and if I
waited till he was away somebody else in his office would of of told him I
was playing on his PC.
But at least I have some useful tips to use in the future if I need to
Thanks
Tim
On Tue October 2 2007 13:46, Andy Random wrote:
> On Tue, 2 Oct 2007, Tim wrote:
> > I need some help tracking down a user on our network at work. I know the
> > current IP address (when I block it they change it) and I know the PC
> > name, but apart from that I have not been able to find out much else.
>
> Take a look at the pstools from www.sysinternals.com or specifically
> PsLoggedOn
>
> http://www.microsoft.com/technet/sysinternals/utilities/psloggedon.mspx
>
> if you have the machine name (of a Windows machine) you should be able to
> tell who is logged on.
>
>
> Andy
____________________________________________________________
FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop!
Check it out at
http://www.inbox.com/earth
