Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

Al Rawlins — Thu, 28 Mar 2013 19:57:25 GMT

Pre Windows 7, I used to use the DefaultUserName to determine who was logged on. If explorer.exe was running, then the DefaultUserName would tell you who was currently logged on. Then I tried this on Windows 7 and only sometimes is this value populated. It also did not tell you if there was more than one user logged on. Instead, I use the owner of the Explorer.exe process. There is always at least one explorer.exe process for every usesr that logs on. Here is the code I use:

Function WhosLoggedOnTS(strComputer)

on error resume next

dim strUsers

dim objWMIService

dim colProcessList

dim objProcess

dim strNameOfUser

dim strUserDomain

dim colProperties

strUsers=""

Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")

Set colProcessList = objWMIService.ExecQuery("Select * from Win32_Process")

For Each objProcess in colProcessList

colProperties = objProcess.GetOwner(strNameOfUser,strUserDomain)

If objProcess.Name = "explorer.exe" then

strUsers = strUsers & strNameOfUser & "," & GetFullName(strNameOfUser)

End If

If strUsers="" then

strUsers="Logged Off"

End If

Set objWMIService=Nothing

Set colProcessList=Nothing

Set objProcess=Nothing

WhosLoggedOnTS=strUsers

End Function

Now I've been asked to find a way to determine who was last logged on......

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

SimonTan — Thu, 03 Jan 2013 21:57:27 GMT

You can also sort the user profiles by modifed date and get the last logged on user that way.

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

jv — Mon, 30 May 2011 19:21:54 GMT

Note that this: '(get-wmiobject win32_computersystem).UserName' only works for logons at teh console. It will not tell you about someone logged on remotely via RDP.

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

Thank You Emil Rakoczy — Mon, 30 May 2011 17:52:57 GMT

Emil Rakoczy....I've been trying to find this forever. THANK YOU!

(get-wmiobject win32_computersystem).UserName

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

Emil Rakoczy — Wed, 16 Feb 2011 12:56:53 GMT

If you use powershell:

(get-wmiobject win32_computersystem).UserName

... will give you the currently logged on user.

re: Hey, Scripting Guy! How Can I Get the Name of the Last User to Log on to a Computer?

Dave Hope — Thu, 05 Aug 2010 08:26:50 GMT

Dear Scripting Guy,

The DefaultUserName and DefaultDomainName values don't get populated in Windows 7. They're under Wow6432Node, but their values are blank.

Any thoughts on an alternative with support for 2000 - 2008R2/7 ?

Thanks