A short tip ;)
To find out were "someuser "is logged on what "workstation"
We go to the domain PDC ( check "netdom query fsmo")
->eventvwr -> security -> filter by
-> "event source":security
-> search the user you are looking for on field - user:
john
That's it.
No comments:
Post a Comment