AD - Given username, find IP

[richietheprogrammer]

Hey all, back with some more AD questions. Is it possible to return machine info (computer name) given a username? Id like to know what computer a specific user is logged in to (and maybe a little history of when they last logged in to which computer), and Im thinking my best odds are using the AD UDF? Thanks for any help!!

[water]

You can't get this information using the AD UDF because it isn't stored in the AD.

This subject has been discussed some time ago on this forum and your best bet is to use a login script and store this information on a file share you can access later.

[water]

Good place to start might be this

[DicatoroftheUSA]

You can use WMI, check out ai_scriptomatic. You can loop through the computers to log was the last user to be logged on.

[richietheprogrammer]

Do you mean a script would have to run on the user's computer? I think theres a way to do what Im looking for using the AD GUI. What you're suggesting wouldnt work since I don't have the computer information.

[richietheprogrammer]

Dictator, I think that would do the opposite of what Im looking for. What you suggested is a way to find the users logged in to a specific machine. Im looking to a log of machines a user has logged in to.

[JLogan3o13]

As Water stated, this is not something that can be done through the UDF. You would need to do this at a higher level, such as A.D. event logging or creating a login script that records this information, or use an asset management suite such as Altiris or SCCM.

[richietheprogrammer]

Oh I see. I actually do use Altiris (web version). Anyway I can script Altiris for quick usage that you can think of?

[JLogan3o13]

What version of Altiris? There should be a canned report for Altiris that shows you the primary user for a machine; you should be able to script either pulling the report or simply querying the database directly.

[richietheprogrammer]

I will have to look into that. Alternatively, is it possible to get a log of all the servers a user has logged in to over some time, or is that the same type of deal?

[JLogan3o13]

When you say all servers a user has logged into, are you talking any member server, or do you mean any Domain Controller the user has authenticated against? If it is the latter, you're back to A.D. logging or some other method of keeping track of this, none of it is automagical.

[richietheprogrammer]

I do mean Domain Controller. I believe I have heard of a tool in the past (possibly a Windows tool?) that retreives a list of Domain Controllers a user has logged in to recently. So this wouldnt be something easily doable using the AD UDF?

[water]

An intermediate result of function _AD_GetLastLoginDate is a list of Domain Controllers and the date/time of the last login. Is this what you are looking for?

[richietheprogrammer]

It sounds like it is what Im looking for. When I try to run it I receive "... ==> Variable must be of type "Object".:" It looks to be failing here:

$__oAD_Command.CommandText = "<LDAP://" & $sAD_HostServer & "/" & $sAD_DNSDomain & ">;(" & $sAD_Property & "=" & $sAD_Object & ");ADsPath;subtree"

Ideas? Thanks a lot for your help by the way!!

[water]

Can you please post the whole script you run?

[richietheprogrammer]

My script:

#include <ad.au3>
_AD_GetLastLoginDate("johnsmith")

[water]

Please have a look at the example script which comes for every function: _AD_GetLastLoginDate.au3

_AD_Open() is missing at the top of the script.

Try to run this code:

#AutoIt3Wrapper_AU3Check_Parameters= -d -w 1 -w 2 -w 3 -w 4 -w 5 -w 6
#AutoIt3Wrapper_AU3Check_Stop_OnWarning=Y

; *****************************************************************************
; Example 1
; Get last login date for current user. Returned as YYYYMMDDHHMMSS
; *****************************************************************************
#include <AD.au3>

; Open Connection to the Active Directory
_AD_Open()
If @error Then Exit MsgBox(16, "Active Directory Example Skript", "Function _AD_Open encountered a problem. @error = " & @error & ", @extended = " & @extended)

; Get last login date for the current user
Global $iLLDate = _AD_GetLastLoginDate()
MsgBox(64, "Active Directory Functions - Example 1", "Last Login Date for User '" & @UserName & "'" & @CRLF & $iLLDate)

; Close Connection to the Active Directory
_AD_Close()

[richietheprogrammer]

Thanks!!! I feel dumb for that. It is taking quite a while to complete. I assume theres no way around that?

[water]

The processing time depends on the number of Domain Controllers to query. If some of them are down it will even take longer.

You could pass the sitename as parameter 2 to reduce processing time.

[richietheprogrammer]

Hmm, so after it took around 5 minutes, the messagebox displayed just a date (correctly) but the logs arent much help as the description was a failure. Here is one of them:

COM Error Encountered in script.au3

AD UDF version = 1.3.0

@AutoItVersion = 3.3.8.1

@AutoItX64 = 0

@Compiled = 0

@OSArch = X86

@OSVersion = WIN_7

Scriptline = 1591

NumberHex = 002000

Number = -21473526

WinDescription =

Description = The server is not operational.

Source = Active Directory

HelpFile =

HelpContext = 0

LastDllError = 0

===================

Any idea what might cause this?