Search This Blog

Tuesday 23 February 2016

Remote session monitoring

The following Windows command can be used to remotely monitor a session.  The default group policy will need to be updated to allow no-consent before this will work:

C:\>query user /server:192.168.20.54
 USERNAME         SESSIONNAME        ID  STATE   IDLE TIME  LOGON TIME
 bob.smith        console             4  Active    5+20:55  22/02/2016 09:10


C:\>mstsc /v:192.168.20.54 /shadow:4 /noconsentprompt

No comments:

Post a Comment