How to get IP address from username

7,522

No, this is not possible as asked, primarily because user-accounts/usernames do not have IP addresses or PCs.

Users, on the other hand, often have have PCs, which may be assigned IP addresses, and if that's what you're trying to track, it is possible to track down the IP address of the PC that a given username logs into or accesses over the network.

However, this involves reading logs (start on the Domain Controller(s)), rather than expecting an arbitrary instance of cmd.exe on an arbitrary computer to automagically know what networked resources an arbitrary username is being used to authenticate against.

Share:
7,522

Related videos on Youtube

Delmonte
Author by

Delmonte

Updated on September 18, 2022

Comments

  • Delmonte
    Delmonte over 1 year

    In a Windows Server 2003 network with domain, is it possible to obtain the IP address or PC name only with username? Using Windows cmd.exe commands from any client on the network.

    • Brent Pabst
      Brent Pabst over 11 years
      Its not clear what you want to do other than get an IP address, can you detail your question more please.
    • Chopper3
      Chopper3 over 11 years
      Are you a domain administrator? if no then the answer is no, if yes you need MUCH more training and until you get that let someone else do your job.
    • HopelessN00b
      HopelessN00b over 11 years
      @Chopper3 That seems like a particularly cruel thing to force on this "someone else" you make mention of.
  • Tonny
    Tonny over 11 years
    Nice answer. I agree with Chopper3's remark as well. I've been training junior admins lately... At least, they claim to be admins...
  • Aaron Copley
    Aaron Copley over 11 years
    @user316687 Your users can't 'Start' -> 'Run...' -> cmd -> ipconfig /all?
  • Delmonte
    Delmonte over 11 years
    Using PsLoggedOn enables me to get username, running: " psloggedon \\pcname " Wouldn't be any tool to do exactly the opposite? I mean, giving username and getting PC name.
  • HopelessN00b
    HopelessN00b over 11 years
    @user316687 In addition to what August said above, get your SA(s)/network admin(s) to grant you access to the Domain Controller's security event logs, from which you can search for a given username to see what IP it's authing to the DCs from. You don't even need to log onto the DCs, you can use the Event Viewer on your PC to target a remote system's event logs. May motivate them to mention that this would enable you to handle more "user shit" without their help, and would result in you bothering them for logged information less.
  • Delmonte
    Delmonte over 11 years
    Thanks to HopelessN00b and August. I clearly understand now.