Home / server / Questions / 32633
Accepted
Andrija
Asked: 2009-06-28 04:09:44 +0800 CST

How to check who is currently logged on to windows workstation from command line?

  • 772

Environment is in domain, server is Windows Server 2003, workstations have Vista and XP installed.
I need the way to check remotely who is currently logged on workstation, preferably from some simple command line and without sysinternals or third party programs.

Thanks

windows command-line-interface users

4 Answers

  1. Best Answer

    This was the original source but that is now 404 :

    They suggested using the (Windows Management Interface Command) WMIC which available on windows :

    WMIC /NODE: xxx.xxx.xxx.xxx COMPUTERSYSTEM GET USERNAME

    Will return the username currently logged into xxx.xxx.xxx.xxx, or 

    WMIC /NODE: "workstation_name" COMPUTERSYSTEM GET USERNAME

    will return the username currently logged into "workstation_name"

    UPDATE: This should working on Windows 10 too - if you are an admin on the remote machine.

    • 47

  2. Sorry, did not notice you do not want to use Sysinternals.
    That is now a Microsoft technet tool, any specific reason to not use it?
    I have preferred Sysinternals over other third party tools before Mark Russinovich moved into Microsoft.

    The Microsoft Sysinternals Suite has a tool called Psloggedon,

    psloggedon.exe -l

    There is also NBTSTAT,

    nbtstat -a NetBIOS-Computer-NAme
    • 17

  3. I've used win32_loggedonuser, but ran into an issue where more than one domain user was returned, so it didn't work for my purposes. Instead I used (In powershell)

    #Get Currently logged in user
$ExplorerProcess = gwmi win32_process | where name -Match explorer

if($ExplorerProcess.getowner().user.count -gt 1){
    $LoggedOnUser = $ExplorerProcess.getowner().user[0]
}

else{
    $LoggedOnUser = $ExplorerProcess.getowner().user
}

    the if is because sometimes getowner will report more than one user for some reason, don't know why but in my case it was the same user so it wasn't an issue.

    • 12

  4. You can get this info from win32_loggedonuser.

    From this page:

    strComputer = "."   ' " use "." for local computer

Set objWMI = GetObject("winmgmts:" _
              & "{impersonationLevel=impersonate}!\\" _
              & strComputer & "\root\cimv2")

Set colSessions = objWMI.ExecQuery _
    ("Select * from Win32_LogonSession Where LogonType = 2 OR LogonType = 10")

If colSessions.Count = 0 Then
   Wscript.Echo "No interactive users found"
Else
   For Each objSession in colSessions
     If objSession.LogonType = 2 Then
       WScript.Echo "Logon type: Console"
     Else
       WScript.Echo "Logon type: RDP/Terminal Server"
     End If
     Set colList = objWMI.ExecQuery("Associators of " _
         & "{Win32_LogonSession.LogonId=" & objSession.LogonId & "} " _
         & "Where AssocClass=Win32_LoggedOnUser Role=Dependent" )

     For Each objItem in colList
       WScript.Echo "User: " & objItem.Name
       WScript.Echo "FullName: " & objItem.FullName
       WScript.Echo "Domain: " & objItem.Domain
     Next
     Wscript.Echo "Session start time: " & objSession.StartTime
     WScript.Echo
   Next
End If
    • 6