E-Mail Notification to detect if specific user is currently logged on to a computer
Is there an E-Mail Alert Notification Query to tell if a specific user is currently logged on a specific computer (MACs or Windows). Basically I want to get an E-Mail Notification if a certain user is detected as being logged in when the Alert runs, but no Email if it is not that user or they are not connected. This user should not be logging onto these specific computers and we'd like to catch them in the process. The code below is pulling the user and the machines I want, but I want to filter out disconnected machines and only get connected.
select MACHINE.*, C.CLIENT_CONNECTED, UNIX_TIMESTAMP(now()) - UNIX_TIMESTAMP(LAST_SYNC) as LAST_SYNC_TIME,
UNIX_TIMESTAMP(LAST_SYNC) as LAST_SYNC_SECONDS
from ORG1.MACHINE
LEFT JOIN KBSYS.KUID_ORGANIZATION O ON O.KUID=MACHINE.KUID LEFT JOIN KBSYS.SMMP_CONNECTION C ON C.KUID = MACHINE.KUID AND O.ORGANIZATION_ID = 1
where ((( USER_LOGGED like '%ouruser%') AND MACHINE.NAME like '%ourmachine%'))
Is this possible or will this not work?
Thanks
Answers (1)
It's possible, but I don't think it would help in this case. It would only be as accurate as often as the machine checks in and/or runs inventory. For instance, if your check in interval is every two hours, the user would have to be logged in when the machine checks in.
Your best bet would be to track it on the domain level: http://support.microsoft.com/kb/556015
http://communities.quest.com/community/quest-itexpert/blog/2012/09/21/windows-cant-do-it-building-your-own-logon-tracking
For Macs, the "last" command in a custom inventory rule might help: http://reviews.cnet.com/8301-13727_7-20029495-263.html
Comments:
-
Figured as much on the accuracy, I will check out the links. Thanks. - SDNBTP 11 years ago