Viewing User Logon Information

 

Hyena supports both viewing a user's logon information, such as the last logon, as well as viewing which user(s) are logged onto a given computer.

 

To view the logon history for a selected user, select the View Logon Information from the user's context menu.  Initially, the user's logon information will be displayed for the current user's server only.  If the user selected belonged to a domain, the information initially displayed will come only from the Primary Domain Controller (PDC) for the user's domain.

 

To view the user's logon information for an entire domain, enter the name of a Window NT/2000 domain in the Domain Name field, and click on the Check All Domain Controllers button.  Hyena will then query all known domain controllers in the selected domain for the user's logon information.

 

Review the list of domain controllers carefully, since a missing controller on the network browse list will result in missing information.  The logon information can be used for security and network traffic analysis since it represents that the user validated against the indicated controller.

 

To view which user(s) are currently logged on to a computer, select one or more computers (in either the tree window or the list window), and select the View Logged On Users context menu option.  The resulting list will include any interactive logged on users, as well as service accounts that are using non-Local System logon accounts.  This information can be copied to the clipboard as well.