Firewall Wizards mailing list archives

Re: Getting windows user name?


From: "Fetch, Brandon" <bfetch () tpg com>
Date: Thu, 9 Sep 2010 14:43:03 -0500

Best guess:
A query of the domain controller that processed that user's login requests from said computer.

I know there's a parameter/field that's updated with when & from where a user was authenticated however that implies 
the use of a domain & said controllers:  entirely useless for a stand-alone system.

I'm afraid you're going to be stuck using a direct query to the host (nbtstat -a) or via the other tools that have been 
suggested (SysInternal options).

Best of luck,
Brandon

-----Original Message-----
From: firewall-wizards-bounces () listserv icsalabs com [mailto:firewall-wizards-bounces () listserv icsalabs com] On 
Behalf Of ArkanoiD
Sent: Thursday, September 09, 2010 7:20 AM
To: Firewall Wizards Security Mailing List
Subject: Re: [fw-wiz] Getting windows user name?

Any chance to do that either


-- without netbios queries, via ldap
-- without requesting info from workstation itself, from AD directly?


_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

This message is intended only for the person(s) to which it is addressed 
and may contain privileged, confidential and/or insider information..
If you have received this communication in error, please notify us 
immediately by replying to the message and deleting it from your computer. 
Any disclosure, copying, distribution, or the taking of any action concerning
the contents of this message and any attachment(s) by anyone other 
than the named recipient(s) is strictly prohibited.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: