Windows

10 Sysinternals tools you shouldn't be without

#4 PsLoggedOn

PsLoggedOn uses a registry scan to look through the HKEY_USERS key to see which profiles are loaded. Looking at the keys with a user ID SID, PsLoggedOn looks up the username of the SID and displays it. This shows you who is logged on in any session to a PC. When querying remote systems, your userid will be found as a connected user session as well. The remote and local users are returned separately to help distinguish logon types,as you can see here.

About

Derek Schauland has been tinkering with Windows systems since 1997. He has supported Windows NT 4, worked phone support for an ISP, and is currently the IT Manager for a manufacturing company in Wisconsin.

6 comments
AlexNet0
AlexNet0

On the Process Explorer section. "The utility has two panes of information, the top pane *shoes*" (shows) "currently active processes on your system and includes information about the name"

gpachello
gpachello

Very usefull tool for remote command execution. It allows @file where you can put a list of machines to excute the same command on all machines. Regards. G.D.P.

Craig_B
Craig_B

I think all the Sysinternals tools are great and I have a little batch file to keep my local copy up to date. rem Copy New sysinternals tools net use t: \\live.sysinternals.com\tools robocopy t:\ c:\Utils /e /r:2 /w:5 /np /xo net use t: /delete

ehula
ehula

I recognize SysInternals from Process Explorer, but didn't know about ZoomIt. That is a neat little program. I plan on using it tomorrow for a presentation on a new process.

hrosita
hrosita

I have a stubborn file that will not delete while the system is running. I love your solution of Movefile.

iShango
iShango

Thanks for that. I like small simple amd smart. This is all three.