PsLoggedOn – Windows CMD Command

See who is logged onto a computer, either locally or remotely

PsLoggedOn’s definition of a locally logged-on user is one that has their profile loaded into the Registry. If no one is currently logged on, PsLoggedOn will return the last logged on user.

Note that PsLoggedOn will show you as logged on via resource share to remote computers that you query because a logon is required for PsLoggedOn to access the Registry of a remote system.

When launched for the first time, PsLoggedOn will create the regkey
HKCU\Software\Sysinternals\PsLoggedOn\EulaAccepted=0x01

You may also like...

Leave a Reply

Your email address will not be published. Required fields are marked *