Question:

How do I find out which computer a user is logged on to on the network.

How do I find out which users are logged on to a computer on the network.

Solution:

PStools from sysinternals has a program called psloggedon.exe that scans the registry keys of the remote computers.

Download PSTools

PSTools can be downloaded from Systinerals website HERE

Extract the .zip file

In the directory PSTools you will see a file called PsLoggedon.exe

Scan network for logged on user

In order to use PsLoggedon.exe you must run it from the command prompt

Start -> Programs -> Accessories -> Command Prompt

Navigate to the directory where you saved PSTools folder to ( example on my system)

> cd "C:\Documents and Settings\Administrator\Desktop\SysInternals\PSTools"

Search entire network to see which computer user is logged into.

C:\Documents and Settings\Administrator\Desktop\SysInternals\PSTools>PsLoggedon.exe <username>

Output:

PSLoggedon v1.34 - See who's logged on
Copyright <c> 2000-2010 MRak Russinovich
Sysinternals - www.sysinternals.com

acme-van\<user> logged onto acme-ws01 locally.
amce-van\<user> logged onto acme01 remotely.

Scan remote computer for logged on users

C:\Documents and Settings\Administrator\Desktop\SysInternals\PSTools>PsLoggedon.exe \\<computer-name>

Output:

PSLoggedon v1.34 - See who's logged on
Copyright <c> 2000-2010 MRak Russinovich
Sysinternals - www.sysinternals.com

Users logged on locally:
5/20/2010 1:38pm    acme-van\<user>

Users logged on via resources shares:
5/20/2010 2:45pm    acme-van\ADMINISTRATOR

**Note that you will always get a logon from the ADMINISTRATOR account showing. This is due to the fact that the ADMINISTRATOR user was used to remotely collect the data on the remote computer to see who is logged in.**

Environment Tested

In order for psloggedon.exe to work you must have the appropriate privileges on the remote computer. The above scenario was done by running psloggedon.exe from the Domain Controller and logged in as the Administrator for the domain.