Firewall Wizards mailing list archives

Re: Getting windows user name?


From: <lordchariot () embarqmail com>
Date: Thu, 9 Sep 2010 11:25:50 -0400

Some vendors will install agents on various AD servers to cull the
information from the security logs and correlate them with last-logged-on
user information from the those same logs. Unfortunately, there doesn't
appear to be a single log entry in AD that has both user and IP address,
hence the need for correlation.
As a comparison, you can LDAP query Novell eDirectory for an IP and it will
return the username logged, but alas, not in AD.

erik

-----Original Message-----
From: firewall-wizards-bounces () listserv icsalabs com [mailto:firewall-
wizards-bounces () listserv icsalabs com] On Behalf Of ArkanoiD
Sent: Thursday, September 09, 2010 7:20 AM
To: Firewall Wizards Security Mailing List
Subject: Re: [fw-wiz] Getting windows user name?

Any chance to do that either


-- without netbios queries, via ldap
-- without requesting info from workstation itself, from AD directly?


_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: