我应该如何从远程计算机获取所有交互式和远程登录会话

Question

My task: write a script to get all interactive and remote logon sessions for the selected remote computer. And for every session find associated user information.

[CmdletBinding()]
param([string]$computername=$env:computername)


function get-logedonuser {            
    param ($computername)            
    Get-WmiObject -Class Win32_LogonSession -ComputerName $computername |ForEach-Object {            
     $data = $_                   
     $id = $data.__RELPATH -replace """", "'"            
     $q = "ASSOCIATORS OF {$id} WHERE ResultClass = Win32_Account"            
     Get-WmiObject -ComputerName $computername -Query $q |            
     Select-Object @{N="User";E={$($_.Caption)}},             
     @{N="LogonTime";E={$data.ConvertToDateTime($data.StartTime)}} 
     Get-WmiObject -Query "select * from win32_loggedonuser" | ForEach-Object { (($_.Antecedent -Split "Name=`"")[1] -Split "`"")[0] }            
    }            
}

How should I find all associated user information? Could you help me?

Answer 1

使用类Win32_LogonSession和Win32_Account 。