Remote User Discovery

From Luke Jackson

Contents 1 Summary 2 Windows XP SP1 < 3 Windows XP SP2 > 4 Task List

Summary

This is a simple explaination on how to determin the current user of a remote Windows system.

Windows XP SP1 <

nbtstat -a <computername>

Windows XP SP2 >

tasklist /v /s <computername> /fi "IMAGENAME eq explorer.exe"

or

qwinsta console /server:<computername>

Task List

tasklist /s gbg-qcd-orange /fi "IMAGENAME eq firefox.exe"