In this section, we'll be covering the query command. In Windows command prompt. The system on our left will be sort of detect mission system. And the system on the right will be our domain controller with Active Directory installed. So what we're going to do, we're going to choose a user Jim McFly. I'm going to get his username, and right click on his name and hit properties and go to account.

Here, we know that his username is MC fly. So there's about four different areas we're going to look at when it comes to the query command using the command prompt. First, we want to query the user himself. Let's do that. I'm going to type query qu er y user and the user name, which is MC fly And hidden. Now we know on this local system, big fly is indeed logged in.

He has a console session, his session IDs, number three, and an active state and actually his login time as well. Next, we're going to look at how to query different sections of different users that's logged in. So what we're going to do, we're going to switch users now this is going to simulate one PC with multiple users logged on to it sort of like a terminal server type of setup environment. So let's go ahead and switch users in log in under the local administrator, what we're doing basically we need to create multiple sessions on this PC So I'm going to go to start, and I'm going to right click on our command prompt and hit Run as administrator. Let's change the color. Now let's go ahead and query the system for the different sessions that's on the host.

So I'm going to type query session and hit enter. Now we know with on this local host, we have two different sessions. We have the administrator which is the active console session, and we see that we also have McFly logged in to the same PC. Like I said, this is good to see how many users are logged into a certain system, maybe you need to know why the computer is starting to lag or freeze different things like that we can see. Okay, let's just exactly see who else is logged into the system. So I'm going to log out.

We're going to go back To Jim's account on golf to control delete. You know we go. Now, let's query the different session IDs. So I'm going to type query qu try. And I'm going to type session and hidden. Like I say before.

Now this will tell us exactly how many users are logged on to the system. And now we know since the administrator logged off, we see that the system picked up that it's only McFly logged into this session. Let's go ahead and see we can query the session ID itself. Want to type query qu dry session, and three, we see that he has the session ID number three, from going to hit enter And this tells us a little bit more about Jim's account, we know that his state is active. He's currently logged in, and his username. Now last, we're going to look at how to query a user on a remote server.

So let's go ahead and take a look. I'm going to tweet, type query, user want to type the server name, colon, and DC, and hidden. There we are. Now we've successfully query the system on our right, which, which has Active Directory installed on it to see who exactly is logged in on a remote PC. And we see indeed that it is the administrator with the main session ID number and he's actively logged in, and also the time that the user logged in. Oh, you guys found this course.

Engaging. We went over a lot of different things in this section for querying how to query users, sessions, session IDs, as well as remote systems for different users. I will see you again in the next one.