Hello everyone,
I have a Windows Web Server 2008 R2 (As Info)
i have a common issue about Netlogon Typ 3 with Ntlm. Eventviewer doesnt show the remote IP Adress in the log. I have tried to set my server to NtlmV2 but then i couldnt log onto my server again... Hover....
I was thinking if there is a way with powershell to find the remote ip trying to logon, with logon type 3 or logon typ 8, even if NtLM is still used on the Server. The idea is, that every connection needs an ip Adress to get response back. So i think that the remote IP Adress will be stored <?<"Somewehere">?> on the server. Is it possible to find the ip Adress of the remote client which started the logon process?
Thank you