Tracking IP Addresses

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

How can I see an IP address in the event viewer from a computer that is
remote that is trying to logon to the server?

I know it can be done but cannot find it anywhere.

Thanks
 
You can enable auditing of logon events via security policy for that server
and then look in the security log for logon events which may show the name
or IP of the computer logging on. If the computer name shows and it is a lan
computer you can ping it or check dns/wins/DHCP for IP information. If it is
a computer from outside of your network you can check the firewall logs
possibly correlating them to events in the security log. Of course you want
to keep the firewall and server in synch timewise. For web servers, the IIS
logs can show the IP addresses of website users if logging is enabled for
the website. --- Steve
 
Agreed. Just to be clear, there is no native way in Windows 2000 to log the
IP address for events such as Windows networking logons, unless you look at
firewall logs from a third party firewall.
 
Back
Top