In microsoft.public.win2000.registry Kenneth Keeley wrote:
> Hi
> Can you tell from the registry if somebody is logged into a
> computer and
> if so who it is. I have found the DefaultUser key in the
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
> NT\CurrentVersion\Winlogon path gives who the last person was. I
> still need to find if the user is currently logged in.
The Sysinternals psloggedon.exe utility may be easiest in practice.
In HKU will be listed loaded profiles for *locally* logged in
accounts. A "network logon" will not be seen at this location at
all. Use of an account's authority without loading it's profile will
also not be seen at HKU.
|