Finding currently Logged on user From Enterprise Console

Hello Karl,

SEC offers no OS management features. You could use Sysinternals PsLoggedOn for example. Why do you want/need to identify the user?

Christian

Hi,

There is a field in the database called LastLoggedOnUser.  It is based on the last time a status message was returned to the management server from the endpoint so it may not be 100% accurate but if computer to user is a 1-1 mapping then it should be good enough.

sqlcmd -E -S .\sophos -d SOPHOS52 -Q "SELECT Name, LastLoggedOnUser from ComputersAndDeletedComputers WHERE Name='[COMPUTERNAME]'"

Where:

.\sophos is a local SOPHOS names SQL Server instance

SOPHOS52 is the name of the "Core" database: see: http://www.sophos.com/en-us/support/knowledgebase/17323.aspx

Replace [COMPUTERNAME] with the name of the computer.

Regards,

Jak

I've heard that it should be exposed in the interface in the next version.

Regards,

Jak