How to Find an IP Address for a User in an Active Directory
By Nina Rotz
Active Directory is a Microsoft-created database that is used to manage a large number of users, also referred to as domains. The Active Directory runs on a Windows server and is used by server administrators to manage the system and keep security logs of every event on the company's computers. Every computer user has an Internet Protocol, or IP, address. Server administrators use Active Directory security logs to see who logged in, when they logged in and what files they accessed.
Login to your Windows server that is running Active Directory using the administrator username and password.
Click "Start" and select "Administrative Tools."
Click on "Event Viewer." A new window will launch.
Click on "Security Log" in the left pane. You will see a list of security log events, such as Active Directory users logging in the system, accessing files and modifying their account settings. Each event or login session will have its own log file. IP addresses are stored in the Account Logon category.
Right-click on the "Success Audit" log in the Account Logon category. Select "Open" from the menu. This log will open in a new window.
Browse through the opened file. You will see the username that logged on, as well as the time and date this even occurred. The last line labeled "Client Address" is the user's IP address. This is the IP address that accessed Active Directory and logged into the system.