Notification

Icon
Error

Logged in users - Show logged in users of the past 14 days

Posted: Wednesday, May 8, 2019 10:31:52 AM(UTC)
senior B.O.F.H.

senior B.O.F.H.

Member Original PosterPosts: 7
0
Like
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.

Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?

Thanks for your help!
CyberCitizen
#1CyberCitizen Member Posts: 429  
posted: 5/9/2019 1:01:25 AM(UTC)
Are you talking about every machine?

If it's just the one machine you can look under the asset page > config > user info > last users.
senior B.O.F.H.
#2senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/9/2019 1:57:46 PM(UTC)
That only shows the user that logged in while lansweeper was scanning. I work in a K-12 school and every 50 minutes there might be another user. I wish to know all the users that logged in to a specific computer in the last 14 days.
PeterSchreutelkamp
#3PeterSchreutelkamp Member Posts: 3  
posted: 5/9/2019 3:10:26 PM(UTC)
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)
senior B.O.F.H.
#4senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/10/2019 12:09:00 PM(UTC)
Originally Posted by: PeterSchreutelkamp Go to Quoted Post
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)


Doesn't that bottleneck the whole network if i do it for all (700) my computers?
JacobH
#5JacobH Member Posts: 176  
posted: 5/10/2019 1:03:59 PM(UTC)
I agree, LSPush is what you'd want to use on a logon script... it processes WMI locally on the machine, and shoots over about 20 to 30KB depending on how much event logs you scan for... so its actually less network traffic than a normal scan from the scanning server to the asset. It will give you the logon history for the most part... it won't catch logons off the network or off VPN (it will just fail because it can't reach the server) unless you open up a listener from the DMZ or border/edge... which I haven't vuln scanned that option...

I generally use an active directory audit application like ADAudit, etc... to make sure I catch the most that I can... but I digress.

LSPush, yes. :)

Active Discussions

Lansweeper try to scan for software license and not working?
by  rader   Go to last post Go to first unread
Last post: Today at 4:25:37 PM(UTC)
Lansweeper LsAgent uninstalled itself (Windows 10 Enterprise)
by  LsUsers70  
Go to last post Go to first unread
Last post: Today at 3:05:37 PM(UTC)
Lansweeper Deploying PowerShell script
by  FreddieIT   Go to last post Go to first unread
Last post: Today at 10:57:34 AM(UTC)
Lansweeper Deploy package - add registry key to HKCU
by  Bginchereau  
Go to last post Go to first unread
Last post: Yesterday at 5:26:16 PM(UTC)
Lansweeper Duplicate Items
by  Tim Van Engeland   Go to last post Go to first unread
Last post: Yesterday at 2:46:32 PM(UTC)
Lansweeper Latest LsAgent version for Windows?
by  mg83  
Go to last post Go to first unread
Last post: Yesterday at 11:07:51 AM(UTC)
Lansweeper Exchange scanning
by  brama   Go to last post Go to first unread
Last post: Yesterday at 8:56:01 AM(UTC)