I need a way to see if multiple people are using the same account to logon to the VPN.  The only way I could think of doing this is with RADIUS logs.

 

I created a report using the "Local Logon-Logoff - RADIUS Logon History (NPS)" for the data. Then I added the column "Calling Station" to get the ip address of the user. So that gets me most of the information, but I still need a way to see if an account is being logged in from multiple ip addresses, because there are too many pages to go through to search one-by-one.

 

So basically something like this.

 

Username, Date/Time, IP Address, Previous IP Address:

JSmith , Jan 1st 2012 1 PM , 64.1.1.1 , 75.2.3.5

 

This way I can immediately see if the IP address don't match. Can I make this using advanced reports? Or perhaps is there a different report that will work?

 

Thanks!