Query session for windows xp

Shay Levy Shay Levy 1 1 gold badge 5 5 silver badges 5 5 bronze badges. Carly Carly 11 1 1 bronze badge. HopelessN00b 53k 31 31 gold badges silver badges bronze badges. Sam Cogan Sam Cogan Nick Berardi Nick Berardi 3 3 gold badges 7 7 silver badges 11 11 bronze badges. But I don't want to kill all the sessions. Only the remote desktop sessions.

Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Podcast Making Agile work for data science. Stack Gives Back Featured on Meta. New post summary designs on greatest hits now, everywhere else eventually. Linked 0. Related Hot Network Questions. Question feed. Server Fault works best with JavaScript enabled.

I checked the net command from Samba , but I don't see anything there—though I admit its possible I missed something. The various session options seem to only display the net session even when I use my domain admin account. For some reason, query. Edit: OK, I am going to give you another alternative since none of this has helped you yet.

You want to query this WinXP machine over the network using your Linux machine. You want to use WMI. You have found a WMI client for Linux. So far so good. I wrote this in Powershell. Sorry, I won't read: can't convert it to Perl or Bash for you, but the concept is what is still the same as long as you can do WQL queries:. LogonTypes of 2 and 10 cover both local and remote interactive sessions, but not service logons, network logons, or batch logons.

Yes, you do need permissions to access the WinXP machine. It's not just going to cough up all this data for an anonymous network process. The local groups on WinXP are not very granular, because WinXP is very old, and its security is far inferior to that of modern versions of Windows But I commend you if you still want to go with the principle of least privilege, in which case, you can use the WMI Control Console, wmimgmt.

Thanks yo Ryan Ries, here is the actual Perl script I'm using. Hopefully it proves useful to someone else. It appears to be working, please feel free to report any bugs. I'll try to remember to update this if I find any.

Also, I couldn't find any way to make this work on XP other than putting the monitoring user in Administrators. I think that's the only way to do it on XP. Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group.

Create a free Team What is Teams? BufferSize , Wnode. If the session is a private session, you also need to set LogFileMode. You can use the maximum session name characters and maximum log file name characters lengths to calculate the buffer size and offsets if not known.

On output, Properties contains the properties and statistics for the event tracing session. You can update the following properties. EnableFlags : Set this member to 0 to disable all system providers. Set this to a non-zero value to specify the system providers that you want to enable or keep enabled. This may be non-zero only for system loggers.

FlushTimer : Set this member if you want to change the time to wait before flushing buffers. If this member is 0, the member is not updated. LogFileNameOffset : Set this member if you want to switch to another log file or to flush a buffering-mode trace to a new log file. If this member is 0, the file name is not updated.

If the offset is not zero and you do not change the log file name, the function returns an error. To turn real time consuming off, set this member to 0. Guid , and Wnode. Flags , and the values you want to update.