The users on my network aren’t what you would call trustworthy and over the weekend some one connected something they shouldn’t. All lansweeper has given me is this:

Cannot resolve hostname to an IP address (MEDIACENTRE) 10/22/2011 4:29:19 PM
The RPC server is unavailable 0x800706BA (MEDIACENTRE) 10/22/2011 4:29:19 PM

Is there anyway I can get more information and catch the miscreant who by the looks of it is watching films while getting paid over time at work.

Finding the ipaddress or the MAC address would help!

This isnt the first time this has happened.

Richard, review the custom actions folder, Bullgates posted a script for internet history of a user. That's how I've been catching my users. Also, I have a batch file that takes down the users firewall so that you would be able to see the machine, I'll have to find it, I made a custom action of it a long time go. Once I find it, I'll post it.