What is the OS of the client workstations?
Instead of script, would you consider enabling NT AUDITING? This way you could set up, LOGON/LOGOFF auditing on the domain. Every time a users logs on/off, a record would be recorded in the domain eventviewer.
Then, if you know that the user is visiting a porn site or something, you could look to the log (filter by username)and be able to record that they were logged onto the network and browsing material that was inappropriate.
This coupled with the firewall or proxy violation log should be proof enough to address the problem with the end user.
Depending on the OS, might be alternatives..
For example, NBTSTAT:
You can use NBTSTAT -A with IP address to find out who is logged onto the machine...but I'm not sure if this is the BEST option.
C:\>nbtstat -A 10.190.2.12
ISP Connection to the internet:
Node IpAddress: [10.190.2.12] Scope Id: []
NetBIOS Remote Machine Name Table
Name Type Status
-------------------------------------------
RUSH <00> UNIQUE Registered
RUSH <20> UNIQUE Registered
WORKGROUP <00> GROUP Registered
RUSH <03> UNIQUE Registered
WORKGROUP <1E> GROUP Registered
WORKGROUP <1D> UNIQUE Registered
..__MSBROWSE__.<01> GROUP Registered
billybob <03> UNIQUE Registered <---username
-hope some of this helps. Joseph L. Poandl
MCSE 2000
If your company is in need of experts to examine technical problems/solutions, please check out