Query User / QUSER

Display information about user sessions on a Terminal server or a Remote Desktop Session Host (RD Session Host) server.

Syntax
      QUERY USER [/server:ServerName]

      QUERY USER UserName [/server:ServerName]

      QUERY USER [SessionName | SessionID] [/server:ServerName]

Key
   UserName    The logon username of the user whose sessions you want to query.

   SessionName The name of the session that you want to query.

   SessionID   The ID of the session that you want to query.

   /server:ServerName
               The Remote Desktop Session Host server to query.
               The default is the current server.

   /?          Display help.

QUSER is a synonym for QUERY USER

Query User returns the following information:

• The name of the user
• The name of the session on the RD Session Host server
• The session ID
• The state of the session (active or disconnected)
• The idle time (the number of minutes since the last keystroke or mouse movement at the session)
• The date and time the user logged on

If you do not specify a user by using UserName, SessionName, or SessionID, a list of all users who are logged on to the server is returned. Alternatively, use query session to display a list of all sessions on the server. When information for multiple users is returned, a greater than > symbol is displayed before the current session.

A user can always query the session to which the user is currently logged on. To query other sessions, the user must have Query Information special access permission.

The User Access permission type grants the following special permissions: Query Information, Logon, and Connect. These special permissions allow a user to: Log on to a session on the terminal server. Query information about a session. Send messages to other user sessions. Connect to another session.

Permissions are set under:

Terminal Services Configuration | Connections | Properties | Permissions | Advanced | Permissions

Powershell

When running quser under powershell it is useful to split the output into rich objects, this can be done with a regex and ConvertFrom-Csv:

(quser) -replace '\s{2,}', ',' | ConvertFrom-Csv

Alternatively the script Get-LoggedOnUser.ps1 will also show disconnected sessions.

Examples

Display information about all users logged on the system:

C:\> query user

Display information about the user ursula on server64:

C:\> quser ursula /server:Server64

“The crowds in the big towns, with their mild, knobby faces, their bad teeth and gentle manners solid breakfasts and gloomy Sundays, smoky towns and winding roads, green fields and red pillar boxes” - George Orwell

Related:

Query Process - Display processes (TS/Remote Desktop).
Query Session - Display all sessions (TS/Remote Desktop).
Query TermServer - List all servers (TS/Remote Desktop).
Reset Session - Delete a Remote Desktop Session.
LOGOFF - Log a user off.
CHANGE - Change Terminal Server Session properties.
MSTSC - Terminal Server Connection (Remote Desktop Protocol).