User may logon to these computers only

[Guest]

Hi;
I would like to run a report on a user which would tell me all the workstations that user has permission to log into. Is this possible?
Thank you!

[cmccullough]

Re: User may logon to these computers only

I'm not sure I understand the question. If they are a member of the domain, they can usually logon to pretty much any computer that is part of that domain unless you've specifically made changes on your computers to prohibit this.

There is also a user property that you can specify what computers they can logon to. You can see that by going to the Logon tab on the user's properties.

[Guest]

Re: User may logon to these computers only

I'm sorry I didn't make myself clear. We set up a user who is only allowed to login to certain workstations (not all the workstations on the domain). In Active Directory this list was limited to 40 workstations. Using Hyena we are able to add in more than 40 workstations. I was looking for an easy way to export this list so we could easily see which workstations this user has permission to log into. Since my original post I have found a different method of doing this that doesn't involve Hyena.
Thank you for your time.

[cmccullough]

Re: User may logon to these computers only

In case someone wants to do this with Hyena, you can use the Exporter for this, and you can view it in Hyena's GUI.

Right-click on All Users and choose Tabular Views->Users(Detailed-General). This will display users and information in the right window, including one called Workstations.

[Guest]

Re: User may logon to these computers only

I tried what you said, but Hyena looks like it is limited to a listing of 29 computers. I may be missing something here though. The user I'm trying to view is restricted to over 40 comptuers. So to break this limitation, in case anyone else is interested, I found a vbs script to output the computers a user is restricted to.

set ObjUser = GetObject("WinNT://DomainName/UserName")
set fso = CreateObject("Scripting.FileSystemObject")
set outputfile = fso.OpenTextFile("C:\report.txt",8,True)

For Each station IN objUser.LoginWorkstations
outputfile.writeline station
next

Thanks for your help!

[kstanush]

Re: User may logon to these computers only

Hyena is not limited to any amount of data, but the Microsoft GUI control that Hyena uses for its right window is limited to displaying only 255 characters of data or it terminates itself, so Hyena has to limit the amount of data that it can display.

If you have a large amount, then you would need to run Exporter Pro to dump this information. It would get the same information that your script does and dump it to a delimited text file.

If you are interested in knowing how to do this, let us know and we'll provide more information.

[Guest]

Re: User may logon to these computers only

I would be interested in learning how to do this using Exporter Pro.
Thank you.

[cmccullough]

Re: User may logon to these computers only

Sorry I didn't see this post. You can do this by selecting your domain in Hyena, or the OU that contains these users, then go to Tools->Exporter Pro->Export Selected Objects.

Click the Settings button, then double-click on Active Directory (Users,Groups,...). Click the box beside Detailed User to select it, then click Properties. There you will see the name of the output file that will be created. You can change this and specify a location if you like.

In the window in the lower left make sure you see userworkstations. Click OK to save this, then OK and then Close. From there click Start Export and when complete you can open the output file with Excel.

[Guest]

Re: User may logon to these computers only

<div class="ubbcode-block"><div class="ubbcode-header">Quote:</div><div class="ubbcode-body">Originally posted by annb:
<span style="font-weight: bold">Hi;
I would like to run a report on a user which would tell me all the workstations that user has permission to log into. Is this possible?
Thank you!</span></div></div>

Did anyone ever answer her post? i too am looking to query this field.