Ok,
Scenario: 4000+ workstations, all have generic naming convention: WSDEPT0001
The problem as you can imagine, is that these workstations names are not tied to a specific user and not to a specific cubicle (only because our helpdesk replaces them on a as-needed basis).
Is there an easy way from an AD/Server log perspective to find who the last person was to log into a machine by machine name only (or IP), WITHOUT having physical access to the workstation itself ?