Remotely view who is logged in

It wouldn't sort out who accessed it remotely compared to logged in locally. Is there a way to sort that out? Isn't our Community Awesome? They beat me to the answer by a long shot You guys nailed it!

Event Viewer even though it has already been said Yeah the security log can get kinda full depending on which events you are auditing.

Right click the security event log and select "Filter Current log. This should make it a bit easier for you to track down the user. I have just recently had to do this as well, I exported the logs and used Log Parser Studio to parse the logs. How about you just look at the last changed value of the user profiles - why make it harder than it has to be?

These logs ought be offloaded regularly to a secured log server or other media for safekeeping. To continue this discussion, please ask a new question.

Get answers from your peers along with millions of IT pros who visit Spiceworks. Best Answer. View this "Best Answer" in the replies below ». Popular Topics in General Windows.

If a machine is not logged in, no explorer. If someone is logged on, the explorer. The wmic command in Command Prompt can retrieve this information. However in order for the clients to respond, a firewall rule is first required. I found a post on community. The examples above are for a PC that is remote and the query is carried out over the network. If the command is run locally then it would have a slightly different syntax. For example:. Sign up to join this community. The best answers are voted up and rise to the top.

Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. How can I tell who is actively logged on locally or remotely a Windows 7 PC?

Ask Question. Asked 7 years, 6 months ago. Active 4 years, 3 months ago. Viewed 99k times. Any help is appreciated. Improve this question. Add a comment. Once UserLock is deployed, every user session on the network is monitored and audited by UserLock to provide immediate and real-time visibility on all network sessions.

Because UserLock continuously monitors all login and session events in real-time, organizations can also react to what users do through alerts. These notifications allow IT administrators, to instantly react and respond, directly from the UserLock console itself E. Leveraging authenticator applications or programmable hardware tokens to generate a time-based one-time password TOTP , administrators can now deploy strong two-factor authentication.

Multi-factor authentication is one of the most effective controls an organization can implement to prevent an unauthorized adversary from gaining access to a device or network and accessing sensitive information.

Fast to deploy, UserLock is installed in minutes on a standard Windows Server. As the video tutorial shows, a wizard walks you through the installation and takes just a few minutes. There is no requirement to use a Domain Controller Server. Any Windows Server can be the host.