+ Post New Thread
Results 1 to 12 of 12
Windows Server 2008 R2 Thread, How to tell who last logged into a netbook in Technical; One of our netbooks has gone AWOL, and despite urging all the teachers to have a look for it in ...
  1. #1
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    579
    Thank Post
    152
    Thanked 73 Times in 63 Posts
    Rep Power
    73

    How to tell who last logged into a netbook

    One of our netbooks has gone AWOL, and despite urging all the teachers to have a look for it in their classrooms (and standing there to make sure they do!) it ain't turning up.

    I would love to be able to find out who last logged into it as this would show up which class to look in.

    I've tried AD Users & Computers and found the last login event was the 8th March - doesn't say who though.

    Is there any way to find out a username?

  2. #2
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    579
    Thank Post
    152
    Thanked 73 Times in 63 Posts
    Rep Power
    73
    Well, have trawled through Event Viewer for the logons between the two time stamps on the netbook object and there's nothing coming up linking it with a user sadly.

  3. #3
    Admiral208's Avatar
    Join Date
    Mar 2008
    Location
    Bridgwater
    Posts
    720
    Thank Post
    176
    Thanked 63 Times in 55 Posts
    Rep Power
    39
    what do you use for internet filtering? are there any logs in that you can look at? chances are if they went on the netbook, it would have connected to the internet and could have left a clue?

  4. #4


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    dosent ad record that in an attribute somewhere i think its hidden by default but i think its logged

  5. #5

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,718
    Thank Post
    3,247
    Thanked 1,049 Times in 971 Posts
    Rep Power
    364
    run a constant ping each day on the computer name the netbook had to see if its brought back in , if so you can go from there and query the computer to find out a logged on username ?

    Otherwise it's been stolen possibly ?

  6. #6
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    579
    Thank Post
    152
    Thanked 73 Times in 63 Posts
    Rep Power
    73
    Quote Originally Posted by sted View Post
    dosent ad record that in an attribute somewhere i think its hidden by default but i think its logged
    Have trawled through the attributes Tab and could only find the last login time and stamp ... no user name. Googling it has brought up various ways of implementing scripts etc for the future if we want to do that, but otherwise has drawn a blank. It just seems to be something that AD doesn't record, unless I've missed it.

    Otherwise, yeah, maybe it has been filched. Still think it's a teacher in a hurry who's put it somewhere and lost it though. Hope so anyway.

  7. #7


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    Does it have centrally managed antivirus? McAfee certainly allows you to see who last logged in.

    Otherwise disable the machine from AD. If its still being used in school someone will bring it back if they can't log in.

  8. Thanks to CyberNerd from:

    kaphc (22nd March 2012)

  9. #8
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    579
    Thank Post
    152
    Thanked 73 Times in 63 Posts
    Rep Power
    73
    The internet filtering won't be a goer, we're on the embc services and should in theory have access to the Netsweeper filtering but in practice primaries don't seem to get much access.

    We're on Symantec Endpoint Protection and that's rolled out via a central management tool so I'll have a look and see tomorrow. Good idea.

  10. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,844
    Thank Post
    876
    Thanked 1,680 Times in 1,460 Posts
    Blog Entries
    12
    Rep Power
    444
    Probably not much help now but this could help you log who logged in where for if it happens again

    Who has logged on where?

  11. #10

    glennda's Avatar
    Join Date
    Jun 2009
    Location
    Sussex
    Posts
    7,800
    Thank Post
    272
    Thanked 1,135 Times in 1,031 Posts
    Rep Power
    349
    You don't use FOG do you?

  12. #11

    Join Date
    Apr 2011
    Location
    Manchester
    Posts
    173
    Thank Post
    10
    Thanked 8 Times in 7 Posts
    Rep Power
    21
    you have to turn logon auditing on to capture logon events from users which you can do per ou even. this wil only help going forward though should it ever happend again.

    HOW TO: Audit Active Directory Objects in Windows Server 2003

  13. Thanks to RageRiot from:

    kaphc (22nd March 2012)

  14. #12
    kaphc's Avatar
    Join Date
    Sep 2009
    Location
    Derbyshire
    Posts
    579
    Thank Post
    152
    Thanked 73 Times in 63 Posts
    Rep Power
    73
    Quote Originally Posted by CyberNerd View Post
    Does it have centrally managed antivirus? McAfee certainly allows you to see who last logged in.

    Otherwise disable the machine from AD. If its still being used in school someone will bring it back if they can't log in.
    And Symantec came to my rescue and showed the kid who last logged in. Wasn't at work Tues/Weds so have "named and shamed" today and will see how the teachers respond. Someone's going to be turning their classroom upside down today I think.
    Last edited by kaphc; 22nd March 2012 at 10:11 AM.

SHARE:
+ Post New Thread

Similar Threads

  1. How to tell which users are logged on
    By Little-Miss in forum Wireless Networks
    Replies: 5
    Last Post: 5th January 2009, 03:59 PM
  2. how to see who hasn't looged into Moodle
    By beeswax in forum Virtual Learning Platforms
    Replies: 3
    Last Post: 13th December 2008, 04:19 PM
  3. Replies: 0
    Last Post: 27th September 2007, 08:11 PM
  4. Who last logged on
    By danIT in forum Windows
    Replies: 1
    Last Post: 2nd October 2006, 09:08 AM
  5. How to tell WinXP from W2000
    By SimpleSi in forum Windows
    Replies: 3
    Last Post: 19th September 2006, 12:43 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •