On a Windows Click the Windows Start button in the bottom left corner. A window similar to the following will be displayed. Reset your password My student card Name change Under Staff wireless Student wireless eduroam.
Check IP address from CMD
About eCentre eCentre login eCentre Internet usage report. Contact information W: logit. Press enter. A shell window will appear. You'll see information regarding your network. Type network and sharing into the Search box in the Start Menu and select Network and Sharing Center when it comes up. Right-click on your local adapter and select Properties. Open Terminal and type sudo ifconfig.
With those noted down, run sudo route -n , this will give us information from your router. This opens the configuration file for the network settings in the nano text editor. Run sudo reboot to restart your Raspberry Pi with its new static IP address. The changes we have made will only take effect after a reboot.
As your network requires a public IP address, you will also need to create public ports that will redirect to your new static IP address and the private port used by Screen Sharing normally unless you have changed it. For the sake of this example, we'll use an Airport Extreme. Select your router brand and model, and then select VNC on the next page. Open Screens and create or edit a screen like you would normally do.
In the Address field, type your No-IP host.
We have a classroom with 20 PC's in a domain, and all PC's use the same user to log in. The problem is that it only says the name of the user, which is the same for all 20 PC's. So I'm looking for the ip address or the computer name of the PC that sent the command, so I can identify the student. Although you claim that the students are not administrators on the computers, by default, only the Administrators group has the right to force the shutdown of a computer from a remote system.
Now, to more directly answer your question , there is probably not enough forensic evidence left on the computer right now to determine what computer the shutdown command was issued from. It is possible to enable more logging that would allow you to capture these events in the future, but enabling such logging now won't help you find out what happened in the past. Specifically, the logging that I'm thinking of that would have helped you is in the Advanced Audit Policy section these are just examples, not an exhaustive list.
Remote shutdown uses RPC, so that's sure to show something. And logging when Windows Firewall permits an inbound connection will absolutely give you an IP address.
How to Ping a Computer or a Web Site
You would be able to correlate the events. Edit : Updating to confirm that as of Windows 8. By default, without having to enable any additional logging.
But I do not know whether older versions of Windows include the IP address or not. Home Questions Tags Users Unanswered. How to find the ip address of the pc that sent a shutdown command? Ask Question. Asked 3 years, 9 months ago.