cancel
Showing results for 
Search instead for 
Did you mean: 

Get Actively Logged On Domain Users

Description: Users that are currently logged on.

What The Data Shows: See who is performing specific actions on a workstation.

SQL: 

Select
User,
Logon_Domain,
Session_ID,
Logon_Time,
Logon_Server,
Logon_Script 
FROM Logon_Sessions
WHERE Logon_Type like "Interactive" AND Logon_Server <> "";

 

2 Comments
Community Manager
Community Manager

Hey @cstamand  appreciate your contribution!  We'll vet this submission and if it runs as expected we'll change this status of your query from Under Review to CB Approved.

Thanks again!

Ed Sullivan

tmccormack
Carbon Black Employee
Status changed to: Approved

Awesome! Thank you for submitting.