How can I ascertain which machine a user is currently using?

A. To identify which machine a particular user is using, you can run a series of commands (and even create a script to automate this process) by performing the following steps:

Open a command prompt--go to Start, Run, and type
```
cmd.exe
```
Type
```
nbtstat -R
```
to purge and reload the remote cache name table.
Type
```
net send  .
```
to send the user a period (.) for a message.
Type
```
nbtstat -c
```
to list the cache of recently used names and IP addresses so you can identify the entry for the user you're communicating with.
Type
```
nbtstat -A 
```
to equate the user's IP address to the machine name.

For example, to locate a user named Kevin, I performed the following series of commands and received the indicated responses:

   C:\>nbtstat -R
   Successful purge and preload of the NBT Remote Cache Name Table.

   C:\>net send kevin .
   The message was successfully sent to KEVIN.

   C:\>nbtstat -c
   Local Area Connection:
   Node IpAddress: \[200.200.200.5\] Scope Id: \[\]

   NetBIOS Remote Cache Name Table

   Name Type Host Address Life \[sec\]
   ------------------------------------------------------------
   KEVIN  UNIQUE 200.200.200.3 597

   C:\>nbtstat -A 200.200.200.3
   Local Area Connection:
   Node IpAddress: \[200.200.200.5\] Scope Id: \[\]

   NetBIOS Remote Machine Name Table

   Name Type Status
   ---------------------------------------------
   WORKST2  UNIQUE Registered
   SAVILLTECH  GROUP Registered
   WORKST2  UNIQUE Registered
   WORKST2  UNIQUE Registered
   SAVILLTECH  GROUP Registered
   WORKST2  UNIQUE Registered
   WORKST2  UNIQUE Registered
   KEVIN  UNIQUE Registered

   MAC Address = 00-08-C3-8F-0D-83

From this information, I discovered that Kevin is using machine WORKST2 at IP address 200.200.200.3.

Comments

Plain text