See exactly who's signed in to any remote Windows machine — instantly. Agentless, real-time, and 100% free. Essential for IT admins before connecting, restarting, or troubleshooting production workstations.
Every feature is purpose-built for real Windows administration work — designed to save time, reduce disruption, and keep your fleet under control.
Before you push a restart, GPO update, or remote session, verify who's actually using the machine. The tool returns the active user, session type (console, RDP, or disconnected), and login timestamp in real time — no agent, no interruption to the user.
Returns the username, domain, session ID, session state (active/disconnected/idle), and login time. Distinguish between a user physically at the console and an RDP session.
Run the query across multiple computers in one operation. Find every machine where a specific user is logged on — invaluable during account compromise investigations or terminations.
Pair with Shutdown/Restart, GPO Update, or Remote Desktop to confirm the machine is idle before disruptive actions. Reduce help-desk tickets from interrupted users.
Unlike Active Directory's lastLogon attribute, this tool queries the live system state. Get the truth about who's signed in right now, not who logged in last week.
Pairs naturally with Remote Desktop, Shutdown/Restart, and Remote Task Manager. All 15 free Windows admin tools live in the same sidebar — switch contexts without opening another window.
From download to first result in five simple steps. No complex configuration, no firewall rules, no additional licensing.
Download and install on your admin workstation. Nothing to push to target PCs — installation takes under two minutes and requires no license key.
Click Logged-on User in the sidebar of the unified Free Windows Admin Tools console. The tool loads instantly alongside the other 14 utilities.
Domain-joined machines populate automatically via Active Directory. No CSV imports, no IP lists to maintain.
Pick a single machine or use Ctrl-click for bulk lookup. The query returns instantly across every endpoint you select.
View the logged-on user, session type, and login time. Now you know it's safe to proceed with the restart, patch, or remote session.
Verify no one is actively working before restarting a machine for patches or troubleshooting. Avoid frustrated users and lost work.
Locate a specific user across your fleet — useful during help desk handoffs, account lockouts, or security investigations.
Identify which machines are actively used vs. dormant — informs your software license seat purchases and hardware refresh planning.
When your needs scale beyond single-tool utilities, Endpoint Central delivers complete UEM — automated patching, software deployment, asset management, remote control, and endpoint security from one console. Free for up to 25 endpoints.
Yes. 100% free, no endpoint limits, no trial period. Part of the Free Windows Admin Tools bundle.
The username, domain, session ID, session state (active, disconnected, idle), and login timestamp for the logged-on user(s) on any remote machine.
Yes. The tool detects both console (physical) and RDP (remote) sessions, and identifies the session type in its output.
Yes. The tool queries remote computers via Windows native APIs using authenticated domain credentials. No agent or service installation required on the target.
AD's lastLogon shows historical login data and can lag by hours or days due to replication. This tool returns the live, real-time logged-on user — what's happening right now on the machine.
Plus 16 other free Windows admin utilities in a single download. No credit card, no sign-up form.