We have a map using the UserLoggedIn Sensor to check who is connected to our Citrix HDX workstations. When we now start to use Windows 10 workstations the sensor recognizes a hidden system account DWM-1 (apparently used for the Windows Desktop Manager service) and therefore the status for the sensor is "in use" although anybody is actuallly logged in. I found the hint, that UserLoggedIn.exe supports the parameter -f=filter. But I didn't find detailed descriptions about the syntax of the filter parameters.
My wish would be: Ignore all users like DWM-# but tell me the username of all other users.
Can you please give me a hint how to define the filter ?
Thanks a lot in advance