3

I have a strong feeling one of our desktop support techs is doing this, but I want to see if I can track this down before I start accusing people. I just dont know how...

While logging into a local web app, the drop down lists a bunch of random entries. I strongly feel its Workgroups not domains, but either way I want to find a way of tracing it.

Look at the following picture:

enter image description here

NTLM is detecting all these domains/workgroups. How do I track them down?

I suspect someone is removing machines from the domain and entering in these as workgroups...

1
  • Well, I asked one of our techs and he said that he did it. Still, I would like to know how to trace this.
    – Keltari
    Apr 2, 2014 at 19:38

1 Answer 1

3

Use netserverenum to get back all the machines on the network. http://msdn.microsoft.com/en-us/library/aa370623(VS.85).aspx

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .