Domain Controller Query Computer Logon to Find User

Question

Hello,

I'm looking for a way to query the domain controller to find out who has been logging into a specific computer. I have 2 computers that we're trying to find out who is logging into them.

I'm looking at XML Queries but all I'm finding is the script to find a specific user's logon.

Does someone have a script that can query a specific computer name's logon, so then I can find the user logging into it?

Answer 1

This tool should sort it.
https://learn.microsoft.com/en-us/sysinternals/downloads/psloggedon

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

That works GREAT !!! I just have to wait until the computer is logged in on our domain and that would work.

Answer 3

Hello @nicholas conger

The topic has been lengthy discussed and provided different answers in this post:

https://learn.microsoft.com/en-us/answers/questions/159086/getting-list-of-users-who-logged-in-within-5-days.html

Hope this helps with your query,

---------------------

--If the reply is helpful, please Upvote and Accept as answer--