Notification

Icon
Error

Logged in users - Show logged in users of the past 14 days

Posted: Wednesday, May 8, 2019 10:31:52 AM(UTC)
senior B.O.F.H.

senior B.O.F.H.

Member Original PosterPosts: 7
0
Like
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.

Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?

Thanks for your help!
CyberCitizen
#1CyberCitizen Member Posts: 168  
posted: 5/9/2019 1:01:25 AM(UTC)
Are you talking about every machine?

If it's just the one machine you can look under the asset page > config > user info > last users.
senior B.O.F.H.
#2senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/9/2019 1:57:46 PM(UTC)
That only shows the user that logged in while lansweeper was scanning. I work in a K-12 school and every 50 minutes there might be another user. I wish to know all the users that logged in to a specific computer in the last 14 days.
PeterSchreutelkamp
#3PeterSchreutelkamp Member Posts: 2  
posted: 5/9/2019 3:10:26 PM(UTC)
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)
senior B.O.F.H.
#4senior B.O.F.H. Member Original PosterPosts: 7  
posted: 5/10/2019 12:09:00 PM(UTC)
Originally Posted by: PeterSchreutelkamp Go to Quoted Post
Originally Posted by: senior B.O.F.H. Go to Quoted Post
Hi

I'm pretty new to the whole Lansweeperthing so bear with me.
Is there a way to make a report of all the users that logged in to a specific device in the last 14 days?
Thanks for your help!


I have put an invocation of lspush in the login script. Every login generates a scan of the PC to the Lansweeper server. That works for me. Probably for you too ;-)


Doesn't that bottleneck the whole network if i do it for all (700) my computers?
JacobH
#5JacobH Member Posts: 162  
posted: 5/10/2019 1:03:59 PM(UTC)
I agree, LSPush is what you'd want to use on a logon script... it processes WMI locally on the machine, and shoots over about 20 to 30KB depending on how much event logs you scan for... so its actually less network traffic than a normal scan from the scanning server to the asset. It will give you the logon history for the most part... it won't catch logons off the network or off VPN (it will just fail because it can't reach the server) unless you open up a listener from the DMZ or border/edge... which I haven't vuln scanned that option...

I generally use an active directory audit application like ADAudit, etc... to make sure I catch the most that I can... but I digress.

LSPush, yes. :)

Active Discussions

Lansweeper BlueKeep Vulnerability
by  miek_g   Go to last post Go to first unread
Last post: Today at 3:09:22 PM(UTC)
Report Center Failed Logins Report/Chart
by  KDavis  
Go to last post Go to first unread
Last post: Today at 1:17:05 AM(UTC)
Lansweeper Office 365 OneDrive Usage and Sync
by  AZHockeyNut   Go to last post Go to first unread
Last post: Yesterday at 7:17:50 PM(UTC)
Lansweeper Firefox 67.0.3 zero-day vulnerability
by  B Claeys  
Go to last post Go to first unread
Last post: Yesterday at 3:13:30 PM(UTC)
Lansweeper VLC Player CVE-2019-5439
by  Esben.D   Go to last post Go to first unread
Last post: 6/18/2019 9:19:29 AM(UTC)
Lansweeper Enabled/Disabled Local/AD Admin accounts
by  vqT4cDoP9iXyMZwoDUWU  
Go to last post Go to first unread
Last post: 6/17/2019 9:12:30 PM(UTC)
Lansweeper code in posts
by  AZHockeyNut   Go to last post Go to first unread
Last post: 6/14/2019 4:39:46 PM(UTC)