We currently require a user to be logged in all the time to a windows system, is it possible to monitor if that user is logged on and alert should it not be?
Many Thanks
Dave
Last change on Aug 23, 2010 8:55:27 AM by
Monitor logged in Windows User
Votes:
1
Best Answer
Accepted Answer
Votes:
1
PTF UserLoggedin
With Custom Sensor PTF UserLoggedin you can check if a specified user is loggedin or not loggedin on a computer.
Basically this sensor gets the number of users that are loggedin on a computer directly or via a RDP session.
You can optionally provide a comma seperated list of users to check if a specific user is loggedin or not loggedin.
-c=computer -u=username -p=password|passhash [-f=filter][-fx] [-fi] -c=computer The ip-address or hostname of the computer to monitor. -u=username The name of the user account that has access to the computer via WMI service. -p=password The password or passhash of the user account that has access to the computer via WMI service. -f=filter Optional filter to not or only count the users specified (comma seperated list). -fx Optional switch, users in the filter are not counted (default). -fi Optional switch, only users in the filter are counted.
To check if user Mike is loggedin on computer 192.168.1.1 :
UserLoggedin -c=192.168.1.1 -u=domain\user -p=password -f=mike -fi
The sensor will now return 1 if Mike is loggedin and 0 if anyone else or nobody is loggedin.
As user credentials cannot be used for local connections, to run the sensor against the local machine (probe), simply do not supply the username and password.
UserLoggedin -c=192.168.1.1 -f=mike -fi
The Custom Sensor can be downloaded from this page.
Last change on Feb 14, 2011 10:40:51 AM by
5 Replies
Votes:
0
This isn't possible "out of the box." One possibility would be write your own custom sensor. Please have a look at the Custom Sensors section of the user manual.
Created on Jul 28, 2010 7:58:16 AM by
Accepted Answer
Votes:
1
PTF UserLoggedin
With Custom Sensor PTF UserLoggedin you can check if a specified user is loggedin or not loggedin on a computer.
Basically this sensor gets the number of users that are loggedin on a computer directly or via a RDP session.
You can optionally provide a comma seperated list of users to check if a specific user is loggedin or not loggedin.
-c=computer -u=username -p=password|passhash [-f=filter][-fx] [-fi] -c=computer The ip-address or hostname of the computer to monitor. -u=username The name of the user account that has access to the computer via WMI service. -p=password The password or passhash of the user account that has access to the computer via WMI service. -f=filter Optional filter to not or only count the users specified (comma seperated list). -fx Optional switch, users in the filter are not counted (default). -fi Optional switch, only users in the filter are counted.
To check if user Mike is loggedin on computer 192.168.1.1 :
UserLoggedin -c=192.168.1.1 -u=domain\user -p=password -f=mike -fi
The sensor will now return 1 if Mike is loggedin and 0 if anyone else or nobody is loggedin.
As user credentials cannot be used for local connections, to run the sensor against the local machine (probe), simply do not supply the username and password.
UserLoggedin -c=192.168.1.1 -f=mike -fi
The Custom Sensor can be downloaded from this page.
Last change on Feb 14, 2011 10:40:51 AM by
Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
Add comment