Re: Getting windows user name?

<[email protected]> Thu, 9 Sep 2010 11:25:50 -0400
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <000301cb5033$492e8210$db8b8630$@com>
Some vendors will install agents on various AD servers to cull the
information from the security logs and correlate them with last-logged-on
user information from the those same logs. Unfortunately, there doesn't
appear to be a single log entry in AD that has both user and IP address,
hence the need for correlation.
As a comparison, you can LDAP query Novell eDirectory for an IP and it will
return the username logged, but alas, not in AD.

erik

> -----Original Message-----
> From: [email protected] [mailto:firewall-
> [email protected]] On Behalf Of ArkanoiD
> Sent: Thursday, September 09, 2010 7:20 AM
> To: Firewall Wizards Security Mailing List
> Subject: Re: [fw-wiz] Getting windows user name?
> 
> Any chance to do that either
> 
> 
> -- without netbios queries, via ldap
> -- without requesting info from workstation itself, from AD directly?
> 
> 
> _______________________________________________
> firewall-wizards mailing list
> [email protected]
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards