IT Question
 

Does anyone know if an NT4 or AD domain controller keeps a log of what machines logged onto the network? We have misplaced a laptop and my boss is asking me if it connected to the network. AFAIK there is no way to tell, but someone please feel free to prove me wrong. :)

Cheers in advance!

Re: IT Question
 

Do you catalog you IT mac addresses ? as this is the unique identifier you can track it's location through layer two network devices.

Cheers Mark.

Re: IT Question
 

Unfortunately no - I think I already know the answer to my own question!

Re: IT Question
 

Just throwing this out, probably totally off, but DHCP logs? not sure how much help it would be.

Re: IT Question
 

Tell me where to look!

I did think of that, trouble is its been logged onto an NT4 domain and I am not sure if its going to tell me enough :(

Re: IT Question
 

Ok does your network use machine names where you can distinguish between a desktop PC or a laptop? eg where I work all workstations have a bar code and their "name" is w{barcode no}.

So I can look in server manager and see all the workstations connected to our PDC. Its usually a list like w303077, w345632, etc

Maybe that may be a way to track it down. Because you can see machines connected and it also gives you the user login used on that machine. If you have a fairly small network if you can tie all logins up to a machine you know about then you have your answer. :D

Re: IT Question
 

You can allways do a netstat from the command line to find all active connections to the server.

As lynw said, in the CP under Server Manager will allow you to see all connected computers and what files they are accessing etc..

Under windows 2000/2003 server you can try Computer Manager and look in Shared Folders for a list of connections to shares.

Re: IT Question
 

Cheers guys, tried all that and it shows no evidence that it is currently connected so I have bit the bullet and told them that it hasnt been - out of my hands now!

Re: IT Question
 

under NT you can use svrmanager to find out what machines are currently connected to your DC

Re: IT Question
 

Sorry if this is a bit late, but you can look in the security logs under event viewer. *IF* you were auditing logons then the computername where the logon took place from will be recorded. If you were not auditing that information then there's no way to tell for sure...