I'am just looking for a way to view the currently connected peers to a Windows SMB share?
For example: I want now to see who is connected to the Windows server and is he doing any file transfers?
9
-
1Related question on Stack Overflow. – Bob Jul 16 '14 at 15:18
10
From a command prompt run net session. That will show you session connection information. It will not show you who is actively transferring data. For that you'll need to run a packet capture program on the server.
You could also run the MMC console relative to the Windows OS and Role for File sharing (Share and Storage Management in Windows Server 2008 R2 for instance). For instance, On Windows Server 2008 and 2008 R2 you could open the Computer Management console and navigate to File Services|Share and Storage Management and click the Manage Sessions item or the Manage Open Files item in the Action Pane.
-
Could you elaborate on your second paragraph, with more specific steps or screenshots if possible? Back when I was looking this up, I did find something similar, but it did not work on Server 2012 (the Computer Management method does work). – Bob Jul 16 '14 at 15:17
-
Thanks for the update. I just can't seem to find that on 2012 for some reason - perhaps they moved or removed it, or perhaps I'm just being stupid. Ah well. – Bob Jul 16 '14 at 16:55
11
There are two basic ways to see which files on SMB shares are being accessed:
[CLI] The
openfilescommand.[GUI] The
Open Filesobject underComputer Management(compmgmt.msc) =>Shared Folders=>Open Files.
Any file that is currently open should be considered to be potentially in use, either being read, written to, or simply held open by a process on a client computer.
These will also show you which user (or computer, if there's no user associated with it) owns the handle. Otherwise, see joeqwerty's answer for how to grab just a list of active SMB sessions/users.
