What clients are authenticated against a Domain Controller?

[SpeedsIE]

Hello,

I know that I can use 'set logonserver' on a client PC to determine which Domain Controller it is authenticated against.

Is there a way to see what/howmany clients are authenticated against a particular DC.

Thanks

Speeds

[Meinolf Weber [MVP-DS]]

Hello SpeedsIE,

If you mean to see on the domain controller how many user are logged on using
that special DC, no. You can of course search the event viewer for the logon
events.

What you can do is to use a script like this one from Richard Mueller:
http://www.rlmueller.net/Logon5.htm

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I know that I can use 'set logonserver' on a client PC to determine
> which Domain Controller it is authenticated against.
>
> Is there a way to see what/howmany clients are authenticated against a
> particular DC.
>
> Thanks
>
> Speeds
>
> http://forums.techarena.in
>

[Florian Frommherz [MVP]]

Howdie!

SpeedsIE schrieb:
> Hello,
>
> I know that I can use 'set logonserver' on a client PC to determine
> which Domain Controller it is authenticated against.
>
> Is there a way to see what/howmany clients are authenticated against a
> particular DC.

You can't tell. Logonserver isn't 100% accurate, too, as it stores the
last logonserver. You can check that with unplugging the machine,
rebooting it and logging on with cached credentials. It should show the
last DC you logged on at.

That info isn't stored in AD anywhere -- what is it, you're interested in?

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

[Jorge Silva]

Hi
Please answer inline:
> I know that I can use 'set logonserver' on a client PC to determine
> which Domain Controller it is authenticated against.

- You can do that, but search for logon scripts and you may want to log to a
text file when the client logs on. Check at ScriptCenter web site they have
many script samples for domain and desktop management. Additionally to
Meinolf sugestion, you may also have a look at LimitLogin even if you don't
want to limit logins.

> Is there a way to see what/howmany clients are authenticated against a
> particular DC.

There's no direct way to get that info, and the clients do NOT maintain a
constant and dynamic connection to a DC. The client is authenticated to a
given DC, receives the ticket and that's it.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"SpeedsIE" <SpeedsIE.3sdvfc@DoNotSpam.com> wrote in message
news:SpeedsIE.3sdvfc@DoNotSpam.com...
>
> Hello,
>
> I know that I can use 'set logonserver' on a client PC to determine
> which Domain Controller it is authenticated against.
>
> Is there a way to see what/howmany clients are authenticated against a
> particular DC.
>
> Thanks
>
> Speeds
>
>
> --
> SpeedsIE
> ------------------------------------------------------------------------
> SpeedsIE's Profile: http://forums.techarena.in/members/99286.htm
> View this thread: What clients are authenticated against a Domain Controller?
>
> http://forums.techarena.in
>

[Richard Mueller [MVP]]

SpeedsID

>
> I know that I can use 'set logonserver' on a client PC to determine
> which Domain Controller it is authenticated against.
>
> Is there a way to see what/howmany clients are authenticated against a
> particular DC.
>

To add to the other replies, the only thing you can do is query for sessions
on a server (such as a DC). This does not mean the corresponding user
authenticated to the DC, only that they have a session (maybe they opened a
file). Also, sessions can seem to come and go as sessions time out, but this
is the best you can do (other than logging information during logon). For
example:
==========
' Bind to LanmanServer on a server (such as a DC).
Set objServer = GetObject("WinNT://MyServer/LanmanServer")
' Enumerate sessions.
For Each objSession In objServer.Sessions
Wscript.Echo "Name: " & objSession.Name
Wscript.Echo "User: " & objSession.User
Wscript.Echo "Computer: " & objSession.Computer
Next
========
When a user authenticates to a DC, presumably they have a session for
awhile, but this can timeout shortly thereafter if they have no further
activity on the DC.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--