Who Is Logged In

  • Thread starter Thread starter Kenneth Keeley
  • Start date Start date
K

Kenneth Keeley

Hi
Can you tell from the registry if somebody is logged into a computer and
if so who it is. I have found the DefaultUser key in the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
path gives who the last person was. I still need to find if the user is
currently logged in.

Thanks
Kenneth
 
nbtstat -a [computername] or [ip address]
look at the 03 record

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hi
| Can you tell from the registry if somebody is logged into a computer and
| if so who it is. I have found the DefaultUser key in the
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
| path gives who the last person was. I still need to find if the user is
| currently logged in.
|
| Thanks
| Kenneth
|
|
 
In said:
Hi
Can you tell from the registry if somebody is logged into a
computer and
if so who it is. I have found the DefaultUser key in the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon path gives who the last person was. I
still need to find if the user is currently logged in.
Click to expand...

The Sysinternals psloggedon.exe utility may be easiest in practice.

In HKU will be listed loaded profiles for *locally* logged in
accounts. A "network logon" will not be seen at this location at
all. Use of an account's authority without loading it's profile will
also not be seen at HKU.
 
Back
Top