Active Directory 检查用户是否登录

作者: 亦舒舒
来源: 51数据库
2022-10-21

问题描述

我正在尝试使用活动目录来判断用户当前是否已登录.活动目录可以做到这一点吗?

I am trying to use active directory to tell if a user is logged in currently. Is this possible with active directory?

我可以检查用户有什么角色 User.IsInRole(@"domain.comTeamLead")

I can check what role the user has User.IsInRole(@"domain.comTeamLead")

但是我看不到任何内容来查看他们当前是否已登录.

But I'm not seeing anything to see if they are currently logged in or not.

推荐答案

严格使用 Active Directory，您将无法获得此信息.Active Directory 不存储此类信息.您可以通过 GPO 打开登录审核并查询个人计算机，但这可能会很麻烦.

By strictly using Active Directory, you will not be able to get this information. Active Directory doesn't store this type of information. You can turn on Login Auditing through GPO and query individuals computers, but that could be messy.

外部解决方案可能是psloggedon:
http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx
虽然这并不理想.

An outside solution could be psloggedon:
http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx
Though that is hardly ideal.

AFAIK 没有开箱即用的数据存储来跟踪当前登录到域的用户.

AFAIK there is no out of the box datastore that keeps track of which users are currently logged into a domain.

另一种选择是制作一个登录/注销脚本，写入特定的文件/数据库，您可以监控该文件以查看谁登录.

Another alternative could be to craft a logon/logoff script that writes to a particular file/database and you could monitor that file to see who is logged in.

推荐阅读