Users that logon locally

[ejensen]

Is it possible to generate a report of computers and/or users that are logging in locally instead of the domain?

I recently found that some of the computers have local computer accounts on them and I suspect that some of the users might be logging on with them to bypass proxies, etc.

thanks,
Eric

[igor_groti]

Hello I need this report but on our version newest one 6.0.6.5 it is not working. I simply copy paste the quote but i receive error

Invalid SELECT statement. Unknown object name: "tblComputers".: Unexpected token "tblComputers" at line 0, column -1

can you please help?

Regards

[ejensen]

that is much faster, thank you.

[Hemoco · Accepted solution]

If you're not after login times specifically, you could also use the report below for a simple list of detected local users.

Select Distinct tblComputers.Computername, tblComputers.ComputerUnique,
tblCPlogoninfo.Username
From tblComputers Inner Join
tblCPlogoninfo On tblComputers.Computername = tblCPlogoninfo.Computername
Where tblComputers.Computer = tblCPlogoninfo.Domain
Order By tblComputers.ComputerUnique

[ejensen]

Thank you. That works except it is such a big list that it kills my browser.
Is there anyway to page the report so it only shows like 100 at a time?
Or is there a way I can exclude a list of users? (e.g. tblCPlogoninfo.Username Not In "user1,user2,user3")

[Hemoco]

The example report below shows a list of recent local user logins.

Select tblComputers.Computername, tblComputers.ComputerUnique,
tblCPlogoninfo.Username, tblCPlogoninfo.Ipaddress, tblCPlogoninfo.logontime
From tblComputers Inner Join
tblCPlogoninfo On tblComputers.Computername = tblCPlogoninfo.Computername
Where tblComputers.Computer = tblCPlogoninfo.Domain
Order By tblCPlogoninfo.logontime Desc