Applications Systems

Determine the last logged on user

Asset inventory, when SAM is installed, attempts to find out the last user to log on to a given windows node. In some cases, the information in Orion may seem wrong. This is advice for making the initial determination as to whether Orion is getting the value presented by the Windows node, or if our value is incorrect for some reason.

First published date

11/13/2018 2:35 AM

Last published date

6/29/2020 5:04 AM

Overview

Asset inventory, when SAM is installed, attempts to find out the last user to log on to a given Windows node. In some cases, the information in Orion may seem wrong. This is an advice for making the initial determination as to whether Orion is getting the value presented by the Windows node, or if our value is incorrect for some reason.

Product section

Server Application Monitor

Resolution

SAM gets that value from the registry on the node; check the key/value below and compare it to the most recently polled value in Orion:

Key: HkeyLocalMachine\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI

Value: LastLoggedOnUser

Type

REG_SZ

If the values match, contact Microsoft support or your local admin to see if they can determine why the incorrect value is being presented.

If it does not a match, contact Solarwinds Technical support for deeper troubleshooting.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.