cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Windows user activity tracking

EP-DaveP
Engaged Sweeper
I've played around with "user query /servername:[computer]" and i'm happy with the information it displays. (The /servername switch is only needed for a remote query. "user query" run locally is all that's needed)

I can see console or rdp, idle times, etc.

Can anyone point me in the right direction to leverage Lansweeper to run this command and collect the results?

I'd like to have it report regularly, like every 5 minutes and store the results so it can be interpreted - the output has a header row that is unneeded.

example output:
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
jdoe rdp-tcp#1 2 Active . 6/27/2022 2:38 PM
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
jdoe 2 Disc 1 6/27/2022 2:38 PM


this even works on terminal servers:
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
dprince rdp-tcp#1 38 Active 1 6/28/2022 6:45 AM
bwayne rdp-tcp#0 39 Active . 6/28/2022 7:01 AM
ballen rdp-tcp#2 40 Active . 6/28/2022 7:03 AM
ckent rdp-tcp#3 41 Active . 6/28/2022 7:52 AM
tstark rdp-tcp#4 42 Active . 6/28/2022 7:58 AM
srogers rdp-tcp#5 43 Active . 6/28/2022 8:15 AM
pcarter 44 Disc 28 6/28/2022 8:35 AM
bbanner rdp-tcp#7 45 Active . 6/28/2022 12:10 PM



Any thoughts or suggestions would be appreciated. Thank you
(dp)
0 REPLIES 0