Get-LoggedinUser and Get-LoggedInUserSID

Gets the username or user SID of a local or remote computer.

Function Get-LoggedInUser {
<#
.SYNOPSIS
Gets logged in user on local or remote computers.

.NOTES
    Author:  Curtis Wright
    Email:   curtis (at) cwew.co
    Date:    05FEB2018
    PSVer:   2.0/3.0/4.0/5.0

#>
#Allowing Cmdlet Bindings
[CmdletBinding(SupportsShouldProcess=$true)]
Param(
$Computer = $env:COMPUTERNAME,
$domain = $env:userdomain
)
Write-Verbose "Computer is $Computer and domain is $domain"
#Getting the current Error Action Preference so the script can set it back after completion.
$CurrentEA = $ErrorActionPreference
Write-Verbose "Current Error action is $CurrentEA"
$ErrorActionPreference = "SilentlyContinue"
Write-verbose "Attempting to use WMI to get currently logged in user"
$ActiveProcesses = Get-WMIObject win32_process -filter 'name="explorer.exe"' -ComputerName $Computer
if (($ActiveProcesses.GetType().basetype.name) -eq "Array")
    {
        Write-verbose "Object is an Array"
        foreach ($Process in $ActiveProcesses)
            {
                $user = $Process.GetOwner().user
                $sessionusers = (query session $user /server:$Computer)[1]
                if ($sessionusers -like "*Active*")
                    {
                    Write-Verbose "Setting user $user"
                    $loggedinuser = $domain + "\"+ $user
                    }
            }
    }
else
    {
    Write-Verbose "Only one user is detected as logged on"
    $loggedinuser = (Get-WMIObject win32_process -filter 'name="explorer.exe"' -ComputerName $Computer | ForEach-Object {$owner = $_.getowner(); '{0}\{1}' -f $owner.domain, $owner.user} | Sort-Object | Get-Unique).tostring()
    }
$loggedin2 = $loggedinuser.Split("\")
$LoggedIn = $loggedin2[1].TrimEnd()
Write-Verbose "User detected as $LoggedIn"
Write-Output $LoggedIn
}


Function Get-LoggedInUserSID {
<#
.SYNOPSIS
Gets logged in user SID on local or remote computers.

.NOTES
    Author:  Curtis Wright
    Email:   curtis (at) cwew.co
    Date:    05FEB2018
    PSVer:   2.0/3.0/4.0/5.0

#>
#Allowing Cmdlet Bindings
[CmdletBinding(SupportsShouldProcess=$true)]
Param(
$Computer = $env:COMPUTERNAME,
$domain = $env:userdomain
)
Write-Verbose "Computer is $Computer and domain is $domain"
#Getting the current Error Action Preference so the script can set it back after completion.
$CurrentEA = $ErrorActionPreference
Write-Verbose "Current Error action is $CurrentEA"
$ErrorActionPreference = "SilentlyContinue"
Write-verbose "Attempting to use WMI to get currently logged in user"
$ActiveProcesses = Get-WMIObject win32_process -filter 'name="explorer.exe"' -ComputerName $Computer
if (($ActiveProcesses.GetType().basetype.name) -eq "Array")
    {
        Write-verbose "Object is an Array"
        foreach ($Process in $ActiveProcesses)
            {
                $user = $Process.GetOwner().user
                $sessionusers = (query session $user /server:$Computer)[1]
                if ($sessionusers -like "*Active*")
                    {
                    Write-Verbose "Setting user $user"
                    $loggedinuser = $domain + "\"+ $user
                    }
            }
    }
else
    {
    Write-Verbose "Only one user is detected as logged on"
    $loggedinuser = (Get-WMIObject win32_process -filter 'name="explorer.exe"' -ComputerName $Computer | ForEach-Object {$owner = $_.getowner(); '{0}\{1}' -f $owner.domain, $owner.user} | Sort-Object | Get-Unique).tostring()
    }
$loggedin2 = $loggedinuser.Split("\")
$LoggedIn = $loggedin2[1].TrimEnd()
$loggedinusersid = (Get-WmiObject win32_useraccount -ComputerName $Computer -Filter "name = '$loggedin' AND domain = '$domain'").sid
Write-Output $loggedinusersid
}

Comments

Post a Comment

Popular posts from this blog

Application Doesn't Install During OSD Task Sequence in SCCM

Image
Dealt with a weird issue recently regarding SCCM and application installing. I was in the process of imaging a machine with SCCM when it was in the process of installing an application (Office 2016 in this case). I had to go, so I hard shut down the machine and put it away. Now, whenever I tried to reimage the machine, it would hang on installing Office 2016. If I held the hard shut down button, the machine had imaged correctly, and had joined the domain correctly. When I looked in the logs after logging in, I noticed that inside AppEnforce.log, instead of the normal logs, there were two install processes. I forgot to take a screenshot of the "bad" logs, but here's what they are supposed to look like. I noticed that there was an entry that said "Reconnecting to existing enforcement for "Office 365 New Install". AppProvider and/or CcmExec may have restarted before enforcement was complete." and then that there were duplicate entries for each entr
Read more

SCCM PXE Boot Issues - No Advertisements Found

Image
I've been battling with a pervasive issue with SCCM where the computer fails to install the SCCM task sequence on the first try, it won't ever boot again. It will constantly just present you with a "failed to boot" message, or something of that regard. Then when you attempt to boot it again, in the SMSPXE.log, it will give you an error that says "no advertisements found". You can see a sample of that log below This is by design of the SCCM system. It won't attempt to rerun a required deployment to the same MAC address. Resolution: I had only set up a deployment to unknown computers as required. The workaround I came up with is to also deploy an "Available" deployment to unknown computers. This will cause the task sequence to be offered as an optional deployment, and give you the chance to re-run the task sequence.
Read more

Outlook VBA Macros for Journal Entries

I recently discovered how amazing the Journal function is in Outlook. Primarily, it's great because it has a timer on it that you can use to track your time. It also allows you to categorize each Journal Entry with a type, as well as the categories already in Outlook. I like using this for if someone calls me, there's an entry type for "Phone Call". I'll record what the conversation was about. It automatically creates a new entry at the day and time you create it. If I'm working on a script, there's a Entry Type for "Scripting". I'll record notes on what I'm working on, and my findings/issues I run into. If I'm doing a task, there's one for "Task". All of these are great but I wanted to add a little more automation to it all. I didn't like that I couldn't easily start a new Journal Entry from the E-Mail Home Screen. I had to open the Journal, create a new Entry and then start the timer. Too much to do when so
Read more