Re: Getting windows user name?
<[email protected]> Thu, 9 Sep 2010 11:25:50 -0400
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <000301cb5033$492e8210$db8b8630$@com> |
Some vendors will install agents on various AD servers to cull the information from the security logs and correlate them with last-logged-on user information from the those same logs. Unfortunately, there doesn't appear to be a single log entry in AD that has both user and IP address, hence the need for correlation. As a comparison, you can LDAP query Novell eDirectory for an IP and it will return the username logged, but alas, not in AD. erik > -----Original Message----- > From: [email protected] [mailto:firewall- > [email protected]] On Behalf Of ArkanoiD > Sent: Thursday, September 09, 2010 7:20 AM > To: Firewall Wizards Security Mailing List > Subject: Re: [fw-wiz] Getting windows user name? > > Any chance to do that either > > > -- without netbios queries, via ldap > -- without requesting info from workstation itself, from AD directly? > > > _______________________________________________ > firewall-wizards mailing list > [email protected] > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards