Hi,
here are the code snippets to list all members of an Active Directory Group.
Some constants
# Define LDAP search root, the Global catalog of the domain $sLDAPSearchRoot="LDAP://yourDomain.com:3268" # The Groupname to looking for $sGroupName="USR_GRP_IN_AD"
Continue reading Powershell: List members of an Active Directory Group
Hi,
if you want to list all Users which are currently logged on to the box use the query command.
List all sessions
c:\> query session
SESSIONNAME USERNAME ID STATE TYPE DEVICE
services 0 Disc
console 1 Conn
>rdp-tcp#0 user1 2 Active rdpwd
rdp-tcp 65536 Listen
Or list all users
c:\> query user
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
>user1 rdp-tcp#0 2 Active . 21.02.2015 19:42
You can also list the processes of the user
c:\> query process
USERNAME SESSIONNAME ID PID IMAGE
>user1 rdp-tcp#0 2 6076 taskhost.exe
>user1 rdp-tcp#0 2 6592 rdpclip.exe
>user1 rdp-tcp#0 2 4840 dwm.exe
>user1 rdp-tcp#0 2 4680 explorer.exe
>user1 rdp-tcp#0 2 7092 vmtoolsd.exe
....
Michael
Hi,
if a virus infection was detected or is just assumed, the best way to found all of them, is to boot from a “Clean” medium to ensure no rootkit hide some importend details from the scanner.
There are a couple of Live CDs for this job.
Microsoft Defender Offline – It used a Windows PE. Has a graphical frontend
Avira Rescue System – Linux based with a graphical frontend
Live Scanner Kaspersky Lab – Linux based with a KDE based Desktop
Dr. Web Live CD – not tested yet
F-Secure Rescue CD – Linux LiveCD – text based
Bitdefender Rescue CD – Linux Live CD with a graphical LXDE Desktop
AVG Rescue CD – Also Linux based but with a menu driven text frontend
Panda Security LiveCD – Linux based and simple to use.
Use multiple of them to get the the best possible result to eliminate all infections!
Michael