Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to login to a remote into either a Win7 or Vista computer but when I connect I get a Logon Message "Another user is currently logged on..." but it does not specify who.

I have a domain username with admin privileges on the computer, how can I see who is logged in?

share|improve this question

10 Answers 10

up vote 15 down vote accepted

You can use the commands listed here to manage Terminal Server connections. query session /server:<servername> is probably the first one you want.

These all require remote procedure call, which is part and parcel with CIFS/SMB (the IPC$ share). Check that the RPC service is enabled first. Second, you can't/shouldn't (depending on network configuration) run these services over anything but the local network. If you're trying to do this sort of management over the Internet, you should be using a VPN or some creative SSH tunneling.

share|improve this answer
Thanks for posting this! – Ziplin Apr 1 '13 at 23:22
@Michael, query is not packaged for non-server Windows. Where can do download it? Or is there an alternative? – Pacerier Mar 20 '15 at 11:06

Use the eventvwr to remotely view the security log for the remote computer, and scroll through the security logs until you find a login event for the other user:

eventvwr [remote computer name without brackets]
share|improve this answer
Seriously? Why would anyone downvote this? – Ziplin Jan 31 '11 at 15:59
Would someone who sympathizes be so kind as to upvote this? I don't think this deserved a +1, but it definitely didn't deserve a -1 – Ziplin Feb 1 '11 at 2:28
upvoted - youre way would work but is much longer and entails more work :) – Trozz Feb 1 '11 at 21:36
Just used this to track down a remote issue and it was so easy. I never knew you could do this! – Tim Perry Jun 19 '12 at 19:40
Ha, glad I could help! – Ziplin Jun 27 '12 at 21:07

Use this command:

wmic /node:"servername or ip address" computersystem get username
share|improve this answer

You should be able to use Terminal Services Manager. If you don't have this on your machine, you can RDP into a server that has it (any server should) under Control Panel -> Administrative Tools -> Terminal Services Manager. Then, go to Actions and choose "Connect to Computer". That will list all active and inactive sessions and users.

share|improve this answer
This just comes back with "Unable to connect to server". Don't know if that's why this got down voted or not. – Ziplin Jan 31 '11 at 16:08
Yeah, I don't know either. I use this all the time to see who didn't log out and to see who is still in a server. – Matt Jan 31 '11 at 16:16

An easy way to do this would be to use PSLOGGEDON

from CMD navigate to where you extract the file and run psloggedon \\machinename


Without downloading any software use the following command from CMD

qwinsta /server:[NAME] or [IP]

share|improve this answer
Weird, I get Error[1722]:The RPC server is unavailable for qwinsta – Ziplin Jan 31 '11 at 16:05
When you run which one? try seeing if Remote Procedure Call is enabled in the Services of the machine you are attempting to query, you can use MMC to connect to the remote machine and enable the service – Trozz Jan 31 '11 at 16:15

Use powershell, MUCH easier, already instealled, no 3rd party tool required:

$computername = 'SomeMachine-or-IP'

Get-WmiObject Win32_ComputerSystem -ComputerName $computername | Select-Object -ExpandProperty UserName

Note that this will always return the user logged on to the physical machine. It will not return terminal service user or users inside a virtual machine. You will need administrator privileges on the target machine. Get-WmiObject supports the -Credential parameter if you must authenticate as someone else.

share|improve this answer
Very cool. I didn't specify, but it is a remote user who is blocking me from login. Good tip though, Jordan. Thanks! – Ziplin Jan 31 '11 at 16:06

Another option i've thought of recently - use PSExec and get the output of netstat on the remote computer. You can easily get the IPs or hostnames of any remotely connected computers.

share|improve this answer

Another easy way I find it to UNC connect to the C:\users folder and sort profile by date updated. Bam easy as.

share|improve this answer
sneaky sneaky... – Ziplin Sep 4 '13 at 17:36

We had an issue where no one could log on as the limit was reached, so we used Remote Desktop Services Manager. That allowed us to see who was RDP in and disconnect the user who forgot to log off.

share|improve this answer

Just login to the remote server by going to mstsc.exe /admin /v:servername you then connect to the admin console this one is never in use

share|improve this answer
This is more about answering how to log in than figuring out who is logged in. – sysadmin1138 Jul 2 '14 at 11:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.