Powershell script to see currently logged in users domain and machine status active idle away

Question

I am searching for a simple command to see logged on users on server  I know this one    Get-WmiObject -Class win32 computersystem   but this will not provide me the info I need  It returns   domain Manufactureer Model Name  Machine name  PrimaryOwnerName TotalPhysicalMemory  I run Powershell 3 0 on a Windows 2012 server   Also   Get-WmiObject Win32 LoggedOnUser -ComputerName  Computer   Select Antecedent -Unique   gives me not the exact answers I need  I would love to see as well the idle time  or if they are active or away

User · Answer

If you want to find interactively logged on users  I found a great tip here  https   p0w3rsh3ll wordpress com 2012 02 03 get-logged-on-users   Win32 ComputerSystem did not help me    explorerprocesses     Get-WmiObject -Query  Select   FROM Win32 Process WHERE Name  explorer exe   -ErrorAction SilentlyContinue  If   explorerprocesses Count -eq 0         No explorer process found   Nobody interactively logged on    Else       ForEach   i in  explorerprocesses                 Username    i GetOwner   User          Domain    i GetOwner   Domain         Write-Host   Domain  Username logged on since     i ConvertToDateTime  i CreationDate

User · Answer

Maybe you can do something with   get-process -includeusername

User · Answer

There s no  simple command  to do that   You can write a function  or take your choice of several that are available online in various code repositories   I use this   function get-loggedonuser   computername     mjolinor 3 17 10   regexa      Domain        Name           regexd      LogonId    d        logontype       0   Local System   2   Interactive    Local logon   3   Network     Remote logon   4   Batch     Scheduled task   5   Service     Service account logon   7   Unlock    Screen saver   8   NetworkCleartext     Cleartext network logon   9   NewCredentials    RunAs using alternate credentials   10   RemoteInteractive    RDP TS RemoteAssistance   11   CachedInteractive    Local w cached credentials      logon sessions     gwmi win32 logonsession -ComputerName  computername   logon users     gwmi win32 loggedonuser -ComputerName  computername    session user         logon users         antecedent -match  regexa  gt   nul  username    matches 1           matches 2     dependent -match  regexd  gt   nul  session    matches 1   session user  session      username      logon sessions      starttime    management managementdatetimeconverter   todatetime    starttime    loggedonuser   New-Object -TypeName psobject  loggedonuser   Add-Member -MemberType NoteProperty -Name  Session  -Value    logonid  loggedonuser   Add-Member -MemberType NoteProperty -Name  User  -Value  session user    logonid   loggedonuser   Add-Member -MemberType NoteProperty -Name  Type  -Value  logontype    logontype tostring     loggedonuser   Add-Member -MemberType NoteProperty -Name  Auth  -Value    authenticationpackage  loggedonuser   Add-Member -MemberType NoteProperty -Name  StartTime  -Value  starttime   loggedonuser

User · Answer

Since we re in the PowerShell area  it s extra useful if we can return a proper PowerShell object      I personally like this method of parsing  for the terseness     quser  -replace    gt        -replace   s 2           ConvertFrom-Csv   Note  this doesn t account for disconnected   disc   users  but works well if you just want to get a quick list of users and don t care about the rest of the information  I just wanted a list and didn t care if they were currently disconnected   If you do care about the rest of the data it s just a little more complex      quser  -replace    gt        -replace   s 2          Trim     ForEach-Object       if     Split      Count -eq 5            Write-Output     -replace               1          else           Write-Output              ConvertFrom-Csv     I take it a step farther and give you a very clean object on my blog   I ended up making this into a module

User · Answer

Here is my Approach based on DarKalimHero s Suggestion by selecting only on Explorer exe processes  Function Get-RdpSessions        param           string  computername              processinfo   Get-WmiObject -Query  select   from win32 process where name  explorer exe   -ComputerName  computername       processinfo   ForEach-Object      GetOwner   User     Sort-Object -Unique   ForEach-Object   New-Object psobject -Property   Computer  computername LoggedOn         Select-Object Computer LoggedOn

User · Answer

In search of this same solution  I found what I needed under a different question in stackoverflow  Powershell-log-off-remote-session  The below one line will return a list of logged on users   query user  server  SERVER

[powershell] Powershell script to see currently logged in users (domain and machine) + status (active, idle, away)

Examples related to powershell

Examples related to active-directory

Examples related to powershell-2.0

Examples related to powershell-3.0

Examples related to windows-server-2012