Notification

Icon
Error

Logged in users - Show logged in users of the past 14 days

Posted: Wednesday, May 8, 2019 10:31:52 AM(UTC)
senior B.O.F.H.

senior B.O.F.H.

Member Original PosterPosts: 7
0
Like
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.

Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?

Thanks for your help!
CyberCitizen
#1CyberCitizen Member Posts: 210  
posted: 5/9/2019 1:01:25 AM(UTC)
Are you talking about every machine?

If it's just the one machine you can look under the asset page > config > user info > last users.
senior B.O.F.H.
#2senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/9/2019 1:57:46 PM(UTC)
That only shows the user that logged in while lansweeper was scanning. I work in a K-12 school and every 50 minutes there might be another user. I wish to know all the users that logged in to a specific computer in the last 14 days.
PeterSchreutelkamp
#3PeterSchreutelkamp Member Posts: 2  
posted: 5/9/2019 3:10:26 PM(UTC)
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)
senior B.O.F.H.
#4senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/10/2019 12:09:00 PM(UTC)
Originally Posted by: PeterSchreutelkamp Go to Quoted Post
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)


Doesn't that bottleneck the whole network if i do it for all (700) my computers?
JacobH
#5JacobH Member Posts: 170  
posted: 5/10/2019 1:03:59 PM(UTC)
I agree, LSPush is what you'd want to use on a logon script... it processes WMI locally on the machine, and shoots over about 20 to 30KB depending on how much event logs you scan for... so its actually less network traffic than a normal scan from the scanning server to the asset. It will give you the logon history for the most part... it won't catch logons off the network or off VPN (it will just fail because it can't reach the server) unless you open up a listener from the DMZ or border/edge... which I haven't vuln scanned that option...

I generally use an active directory audit application like ADAudit, etc... to make sure I catch the most that I can... but I digress.

LSPush, yes. :)

Active Discussions

Lansweeper Windows 7 EOL
by  Esben.D   Go to last post Go to first unread
Last post: Today at 12:22:43 PM(UTC)
Lansweeper Patch Tuesday report, last 3 months
by  Esben.D  
Go to last post Go to first unread
Last post: Today at 10:55:07 AM(UTC)
Lansweeper Thunderbird 68 Vulnerability
by  Esben.D   Go to last post Go to first unread
Last post: Today at 8:41:29 AM(UTC)
Lansweeper Drive Encryption statuses
by  JacobH  
Go to last post Go to first unread
Last post: Yesterday at 5:41:10 PM(UTC)
Report Center Local admin group report based on domain role
by  JacobH   Go to last post Go to first unread
Last post: Yesterday at 5:24:13 PM(UTC)
Lansweeper Number of scanned IPs
by  wayneRex  
Go to last post Go to first unread
Last post: Yesterday at 10:21:01 AM(UTC)
Lansweeper Ticket Summary by Agent?
by  susan.starr   Go to last post Go to first unread
Last post: 9/17/2019 4:41:26 PM(UTC)
Report Center Virtual machines and their host
by  klaus  
Go to last post Go to first unread
Last post: 9/17/2019 8:44:57 AM(UTC)