Logged Users in Domain – System Information

If you want to check which user is loggedon on to a PC or PCs in your windows domain, use the tool psloggedon from Russinovich. (Microsoft Windows User Management).Download it from Microsoft’s page:

http://technet.microsoft.com/en-us/sysinternals/bb897545.aspx

and copy it to your %windows%system32 path. Remember that you must be an administrator on the PC or remote system.

C:\Documents and Settings\Admin>psloggedon batman


loggedon v1.33 - See who's logged on
Copyright ⌐ 2000-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

RD\batman logged onto PC05 remotely.
RD\batman logged onto PC04 remotely.
RD\batman logged onto PC07 remotely.
RD\batman logged onto MYPC locally.
RD\batman logged onto S01 remotely.
RD\batman logged onto S02 remotely.

Let's see who is now remotely logged on PC08
C:\>psloggedon \\PC08


loggedon v1.33 - See who's logged on
Copyright ⌐ 2000-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

Users logged on locally:
Error: could not retrieve logon time
NT AUTHORITY\SERVICIO LOCAL
Error: could not retrieve logon time
NT AUTHORITY\Servicio de red
06-Mar-2009 6:58:31 AM CONTOSO\intruder
Error: could not retrieve logon time
NT AUTHORITY\SYSTEM

Users logged on via resource shares:
06-Mar-2009 12:05:28 PM CONTOSO\Admin

we find the user "intruder", loggedon the remote system