How can I find user name(of the local machine i.e windows OS) of the last logged on user on a remote system(windows server 2003). Is there any command or script we can use? I am able to capture IP address of the local machine of the user but not the username. Please suggest.

Hi, May I know that is the user name local one or belonged to the remote system 2003? I think Windows Server 2003 could only records the local user name even if it remote logons. You may check the Windows Server 2003 Local Group Policy->Computer Settings->Security Settings->Local Policies->Security Options->Interactive logon: Do not display last user name, disable this option. On logon session, you will find the last logon user name and the remote Computer name. Here is the guide of this option. Interactive logon: Do not display last user name http://technet.microsoft.com/en-us/library/cc785301(v=ws.10).aspx