Lesson 4: Monitoring Network Users
You can also use the Computer Management snap-in or the Shared Folders snap-in to monitor which users are currently gaining access to shared folder resources on a server from a remote computer, and you can view the resources to which the users have connections. You can disconnect users and send administrative messages to computers and users, including computers and users who aren't currently gaining access to network resources.
After this lesson, you will be able to
Disconnect a specific user from his or her network connection.Send administrative messages to users.
Estimated lesson time: 20 minutes
Monitoring User Sessions
You can use the Computer Management snap-in or the Shared Folders snap-in to view users who have a connection to open files on a server and the files to which they have a connection. This information enables you to determine which users you should contact when you need to stop sharing a folder or shut down the server on which the shared folder resides. You can disconnect one or more users to free idle connections to the shared folder, to prepare for a backup or restore operation, to shut down a server, and to change group membership and permissions for the shared folder.You use the Sessions folder in the Computer Management snap-in or the Shared Folders snap-in to view a list of the users with a current network connection to the computer that you are monitoring (see Figure 20.4).
Figure 20.4 The Sessions folder in the Computer Management window
Table 20.5 describes the information that is available in the Sessions folder.Table 20.5 Information Available in the Sessions Folder
Column name | Description |
---|---|
User | The users with a current network connection to this computer |
Computer | The name of the user's computer |
Type | The operating system running on the user's computer |
Open Files | The number of files that the user has open on this computer |
Connected Time | The time that has elapsed since the user established the current session |
Idle Time | The time that has elapsed since the user last gained access to a resource on this computer |
Guest | Whether this computer authenticated the user as a member of the built-in Guest account |
Disconnecting Users
You can disconnect one or all users with a network connection to a computer. You disconnect users so that you can do any of the following:
Have changes to shared folder and NTFS permissions take effect immediately. A user retains all permissions for a shared resource that Windows 2000 assigned when the user connected to it. Windows 2000 evaluates the permissions again the next time that a connection is made.Free idle connections on a computer so that other users can make a connection when you reach the maximum number of connections. User connections to resources might remain active for several minutes after a user finishes gaining access to a resource.Shut down a server.
NOTE
After you disconnect a user, he or she can immediately make a new
connection. If the user gains access to a shared folder from a Windows-based client computer, the client computer will automatically reestablish the connection with the shared folder. This connection will be established without user intervention unless you change the permissions to prevent the user from gaining access to the shared folder or you stop sharing the folder to prevent all users from gaining access to the shared folder.
You can disconnect a specific user, as follows:
In the console tree, under Shared Folders, click Sessions. In the list of users in the details pane, select the user that you want to disconnect, and then click Close Session on the Action menu.
NOTEIf you want to disconnect all users, click Sessions in the console tree, and then click Disconnect All Sessions on the Action menu.To prevent data loss, always notify users who are accessing shared folders or files that you are ready to stop sharing a folder or shut down the computer.
Sending Administrative Messages to Users
You can send administrative messages to one or more users or computers. Send administrative messages to users who have a current connection to a computer on which network resources are shared when there will be a disruption to the computer or resource availability. Some common reasons for sending administrative messages are to notify users when you intend to do any of the following:
Perform a backup or restore operationDisconnect users from a resourceUpgrade software or hardwareShut down the computer
Use the Computer Management snap-in or the Shared Folders snap-in to send administrative messages to users. By default, all currently connected computers to which you can send a message appear in the list of recipients. You can add other users or computers to this list even if they don't have a current connection to resources on the computer.
Practice: Sending Console Messages
In this practice, you will use the Shared Folders snap-in to send a console
message. To send a console message
Either start the Computer Management console, or use Microsoft Management Console to create a custom Shared Folders console. In the console tree, under Shared Folders, click Shares. On the Action menu, point to All Tasks, and then click Send Console Message. In the Message box, type Log Off Now. PRO1 is shutting down in 5 minutes.If your computer isn't connected to a network, the Send button won't be available and the Recipients box will be empty. Click Add.The Add Recipients dialog box appears. Type PRO1 in the Recipients box.PRO1 should be the name of your computer. If you didn't name your computer PRO1, type the name of your computer in the Recipients box. Click OK.Notice that the Send button is now available. Click Send.A message box briefly appears showing that the message is being sent, and then the Messenger Service dialog box appears, as shown in Figure 20.5. It confirms that a message was sent from PRO1 to PRO1, indicating the date and time the message was sent, and displaying the message that was sent. Click OK to close the message box. Close all windows and log off.
Figure 20.5 The Messenger Service dialog box
Lesson Summary
In this lesson, you learned that you can use the Computer Management snap-in or the Shared Folders snap-in to view users who have a connection to open files on a computer and the files to which they have a connection. The Sessions folder allows you to view connections to open files on a server, and it allows you to disconnect a specific user or all users with a network connection to a computer.You also learned that the Computer Management snap-in or the Shared Folders snap-in allows you to send administrative messages to one or more users or computers, and that by default, all currently connected computers appear in the list of recipients to which you can send a message. Finally, you learned how to add other users or computers to the list of recipients for administrative messages, even if they don't have a current connection to any resources on the computer.