WMIC custom inventory Number of Logons question
On a recent KKE about custom inventories there was an example given.
ShellCommandTextReturn(wmic netlogin get Name, NumberOfLogons)
This command is supposed to return who all has logged into a targe machine and how many times.
I've talked to the teacher of the KKE (Ron Colson) and he says that command works correctly for him, but on my systems it seems to return wacky results. Below is what is returned on my machine.
C:\Users\jstrickland>wmic netlogin get Name, NumberOfLogons
NT AUTHORITY\LOCAL SERVICE
NT AUTHORITY\NETWORK SERVICE
The users returned are correct, but the number of logons is wayyy off. Anywhere in our domain that my name pops up it says I've logged in 65535 times.
Anyone have any ideas about this?