Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a strong feeling one of our desktop support techs is doing this, but I want to see if I can track this down before I start accusing people. I just dont know how...

While logging into a local web app, the drop down lists a bunch of random entries. I strongly feel its Workgroups not domains, but either way I want to find a way of tracing it.

Look at the following picture:

enter image description here

NTLM is detecting all these domains/workgroups. How do I track them down?

I suspect someone is removing machines from the domain and entering in these as workgroups...

share|improve this question
    
Well, I asked one of our techs and he said that he did it. Still, I would like to know how to trace this. – Keltari Apr 2 '14 at 19:38

Use netserverenum to get back all the machines on the network. http://msdn.microsoft.com/en-us/library/aa370623(VS.85).aspx

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .