Any way to tell if someone is logged in remotely?

[taz]

Is there any way to tell if someone is logged in remotely to GBPVR (using EWA)? I had a friend logged in the other day when I went to reboot the pc for other reasons. Not sure if it is related but I couldn't get the pc (Windows XP) to shut down or reboot. I ended up killing it from the power switch. Had I known someone was logged in I would have waited.

[gEd]

if you run a command shell and then type netstat -a, you will see a number of TCP connections on <pcname>:EWA port.

e.g
TCP htpc:7647 192.168.0.7:1056 TIME_WAIT
TCP htpc:7647 192.168.0.7:1057 TIME_WAIT
TCP htpc:7647 192.168.0.7:1058 TIME_WAIT
TCP htpc:7647 192.168.0.7:1059 TIME_WAIT
TCP htpc:7647 192.168.0.7:1060 TIME_WAIT
TCP htpc:7647 192.168.0.7:1061 TIME_WAIT
TCP htpc:7647 192.168.0.7:1062 TIME_WAIT
TCP htpc:7647 192.168.0.7:1063 TIME_WAIT
TCP htpc:7647 192.168.0.7:1064 TIME_WAIT
TCP htpc:7647 192.168.0.7:1066 TIME_WAIT
TCP htpc:7647 192.168.0.7:1067 TIME_WAIT

However I very much doubt that someone being connected to your pc would have prevented you from shutting it down.

[wtg]

sysinternals.com has a freeware program called TCPView that is great for seeing all the running processes on your PC that have an internet connection, and the IP address and domain they're connected to.

Works great, and also is a good tool for spotting malware or other sneaky programs that access the net without you knowing it.

[taz]

Thanks. I will have to give those a try.