Who Is Logged In

[Kenneth Keeley]

Hi
Can you tell from the registry if somebody is logged into a computer and
if so who it is. I have found the DefaultUser key in the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
path gives who the last person was. I still need to find if the user is
currently logged in.

Thanks
Kenneth

 

[Dave Patrick]

nbtstat -a [computername] or [ip address]
look at the 03 record

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Hi
| Can you tell from the registry if somebody is logged into a computer and
| if so who it is. I have found the DefaultUser key in the
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
| path gives who the last person was. I still need to find if the user is
| currently logged in.
|
| Thanks
| Kenneth
|
|

 

[Mark V]

Hi
Can you tell from the registry if somebody is logged into a
computer and
if so who it is. I have found the DefaultUser key in the
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon path gives who the last person was. I
still need to find if the user is currently logged in.

The Sysinternals psloggedon.exe utility may be easiest in practice.

In HKU will be listed loaded profiles for *locally* logged in
accounts. A "network logon" will not be seen at this location at
all. Use of an account's authority without loading it's profile will
also not be seen at HKU.