Share via

find out employee login and logout data from SCCM

Garima Das 1,061 Reputation points
2022-05-09T21:46:34.763+00:00

Hi Experts,

I recently got a request from one of the teams where they wanted to take a look at when the user is logging on to his Windows computer and when is he logging out of the computer.

and they want us to pull out this data from SCCM.

As far as I know, SCCM maintains a record of the Last logged User and Last logged on time. So, from there we can get the last logged-on information for any windows 10 device.

But Does SCCM, also keep the information about when the user logged off from the system?

Thanks.

Microsoft Security | Intune | Configuration Manager | Other

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Garth 5,801 Reputation points
    2022-05-10T10:21:50.057+00:00

    Cm is NOT the right tool for this. Cm DOES NOT record these details. You should look at the local event viewer and ad logs for this.

    2 people found this answer helpful.
    0 comments
  2. Amandayou-MSFT 11,156 Reputation points
    2022-05-10T08:50:24.657+00:00

    Hi,

    We could use this following the method to see if it is successful.
    How to Query Asset Intelligence for Top Console User Details (recastsoftware.com)
    Note: Non-Microsoft link, just for the reference.

    According to this article, please ensure that the computer logon audit policy is enabled and Ensure that AI data is turned on for collection by hardware inventory.

    After the policy on the side of client is enabled, we will see the event ID 4634 is recorded in it,

    200517-510.png

    And then browse to the SMS_SystemConsoleUsage class and then double-click on it, we will see the related record.

    Meanwhile, we could use powershell to get the result.

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.