I am trying to monitor activity on a windows virtual machine. One of the things I need to monitor is if the users connecting to the server using "Remote Desktop Connection" are actively using the window.
More specifically I want to run a script to check if a user has the Remote Desktop Connection on top in their own PC, but I want to be able to check that from the server.
You can use query session and or qwinsta
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/query-session
https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/qwinsta
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thank you @DSPatrick, for your answer. The problem with this is the status check is the status of the connection and the "active" only means that the connection is active and open not that it is on top or on focus in their pc it might be just a window open on the original pc and it takes too long to change to "Idle" state.
6 people are following this question.
