Hi all,
is there a property that can display the number of time a user had logged on to a Windows workstation? We are trying to identify the possible owner of the workstation because we didn’t have asset management to keep track. Or does Bigfix has a better way to determine possible owner?
Thanks in advance.
This should help get you started: https://bigfix.me/analysis/details/2995831
We had an old “primary user” property that would track the last X logins and then determine who logged in the most over those logins and then that could be your asset owner. However, it is not working for me at the moment. I will look at it tomorrow.
1 Like
Thanks dmccalla,
I have the last logged on user and that seems to be working well.
But when I tried the “User with most logons”, it mostly returned what seems to be local admin accounts. Some I recognize, but others I don’t know where they came from.
Such as, "Signature"
this is the relevance:
unique values of names of users whose( logon count of it = maximum of logon counts of users )
Yes those are local accounts. I have my old stuff working again but it does not include the domain info. It does list out local and domain users - just not in domain/user format. Let me work on that and I will get back to you.