If they are connected to a share already... done. Just let the list of open sessions tell you what username is associated. Alternatively dump the FDB on the sw

If they are connected to a share already... done. Just let the list of open sessions tell you what username is associated. Alternatively dump the FDB on the switch. Really easy if you use voip phones with downstream connections to the computer. Then you can lookup which phone MAC is associated and call it. Depends on your environment but once you find a method. Write a script and tie it to the new MAC alert. So the report would look like. "New device on switch x port 6 given IP y.y.y.y and logged into shares under z."