Get-WMIObject Win32_ComputerSystem UserName returns null for RDP user

Question

Get-WMIObject Win32_ComputerSystem UserName returns null for RDP user

Russell Ramey 26

So I am writing a PowerShell script to pick up some info from domain machines and one of the things that I want to correlate with is logged on user. In theory that is

(Get-WmiObject -ComputerName $CompName -ClassName Win32_ComputerSystem).username

...and it works just fine for locally logged in users. HOWEVER, it returns null for an RDP logged in user and I can't find any other way to get that information.

Has anyone got a clue how to get that info for an RDP logged in User?

This is all Active Directory 2016 with Win 10 1909 or later clients

Accepted answer

0 additional answers

Your answer

Answer 1

Anonymous

Hi,

You can try query user

query user /server:$servername

Best Regards,
Ian Xue

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Russell Ramey 26 Reputation points

2021-04-09T13:29:59.463+00:00

Very interesting. Tunnel vision - it never occurred to me.

*query* explicitly returns both active and disconnected RDP sessions,

I wish there was an equivalent PowerShell cmdlet that returned a PS object but this is very helpful.

Thank you
LEVY Antoine 0 Reputation points

2024-11-07T09:38:01.01+00:00
Actually, I would avoid to use query user.
While it seems quite useful, it's complicated to parse safely in some stable code.

It all depends on the way info is returned: no clean object or array. Eventually, MS could change the way information is given in next windows versions, and it would break all the code.

To make things more complicated, the "query user" command is localized... Yeah... this means column names are NOT the same depending on your language. THIS is also a real pain for anyone who wants to safely parse data...
I don't say it's impossible, but be VERY careful if you use that method...

From my point of view, I wonder if I would not just rely on $env:username and eventually on $env:SESSIONNAME if I need to know if it's remote session or not...

Share via

Get-WMIObject Win32_ComputerSystem UserName returns null for RDP user

0 additional answers

Your answer