15. How to get the last user logged into a computer with PowerShell

🔍 Tracking Logged-In Users:
- Uses Get-ChildItem to query user profiles and retrieve the LastWriteTime for identifying the last user logged into a computer.
- Implements Get-WmiObject with Win32_Process to track the owner of the Explorer process as an alternative.

📋 Multiple User Caveat: Notes that both methods may yield multiple results if multiple users are logged into the same machine.

🔗 Practical Application: Highlights how this script can help locate devices within an organization for lifecycle or inventory management purposes.

#PowerShell #PowerShellTraining #CyberAutomate #LearnPowerShell #PowerShellAutomation

[AJOnuska]

Awesome! This just saved me a bunch of hassle. Thanks for spreading the wealth, bruh.

[kinahhalim]

Is there a way, for me to have a complete list of computer and displayname for a user that using it?

[lexwaldez]

Thanks. Really easy for what i needed.

[Sabs]

hi, how can I get a list of the computers from AD with the user that has login into them?

[vaibhavpratap]

How to get the ip address and timing of the different users ??

[riyasck]

Dear, when i put the any domain joined computer name in the section of computer name, it is giving error that cannot find path and does not exist.
Could you please tell me how i need to put the path of a domain joined computer from AD powershell?

Thanks in advance

[SproutzieReal]

Is there a way to find a users computername by searching username? Here is the scenario. Some of our clients are not comfortable with navigation to control panel to find computername. Is there a PowerShell command to search a username last machine logged it?

[ekpurdy]

get-eventlog system -ComputerName $variable -source Microsoft-Windows-Winlogon