Is there an E-Mail Alert Notification Query to tell if a specific user is currently logged on a specific computer (MACs or Windows). Basically I want to get an E-Mail Notification if a certain user is detected as being logged in when the Alert runs, but no Email if it is not that user or they are not connected. This user should not be logging onto these specific computers and we'd like to catch them in the process. The code below is pulling the user and the machines I want, but I want to filter out disconnected machines and only get connected.

 

select MACHINE.*, C.CLIENT_CONNECTED, UNIX_TIMESTAMP(now()) - UNIX_TIMESTAMP(LAST_SYNC) as LAST_SYNC_TIME,
                       UNIX_TIMESTAMP(LAST_SYNC) as LAST_SYNC_SECONDS
                  from ORG1.MACHINE
                  LEFT JOIN KBSYS.KUID_ORGANIZATION O ON O.KUID=MACHINE.KUID LEFT JOIN KBSYS.SMMP_CONNECTION C ON C.KUID = MACHINE.KUID AND O.ORGANIZATION_ID = 1
                 where (((  USER_LOGGED like '%ouruser%') AND MACHINE.NAME like '%ourmachine%'))

Is this possible or will this not work?

Thanks

Answer Summary:
Cancel
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Answers

4

It's possible, but I don't think it would help in this case. It would only be as accurate as often as the machine checks in and/or runs inventory.  For instance, if your check in interval is every two hours, the user would have to be logged in when the machine checks in.

Your best bet would be to track it on the domain level: http://support.microsoft.com/kb/556015

http://communities.quest.com/community/quest-itexpert/blog/2012/09/21/windows-cant-do-it-building-your-own-logon-tracking

For Macs, the "last" command in a custom inventory rule might help: http://reviews.cnet.com/8301-13727_7-20029495-263.html

Answered 09/21/2013 by: jknox
Red Belt

  • Figured as much on the accuracy, I will check out the links. Thanks.
Please log in to comment
Answer this question or Comment on this question for clarity