Query Session / Qwinsta

Display information about user sessions on a Terminal server or a Remote Desktop Session Host (RD Session Host) server.

Syntax
      QUERY SESSION [/server:ServerName]
         [/mode] [/flow] [/connect] [/counter]

      QUERY SESSION UserName [/server:ServerName]
         [/mode] [/flow] [/connect] [/counter]

      QUERY SESSION [SessionName | SessionID] [/server:ServerName]
         [/mode] [/flow] [/connect] [/counter]

Key
   UserName    The logon username of the user whose sessions you want to query.

   SessionName The name of the session that you want to query.

   SessionID   The ID of the session that you want to query.

   /server:ServerName
               The Remote Desktop Session Host server to query.
               The default is the current server.

   /mode       Display current line settings.

   /flow       Display current flow-control settings.

   /connect    Display current connect settings.

   /counter    Display current counter information, including the
               total number of sessions created, disconnected, and reconnected.

   /?          Display help.

Qwinsta is a synonym for QUERY SESSION.

A user can always query the session to which the user is currently logged on. To query other sessions, the user must have Query Information special access permission.

If you do not specify a session by using SessionName, UserName, or SessionID, information about all active sessions in the system will be displayed.

When QUERY SESSION returns information, a greater than (>) symbol is displayed before the current session.
Sample output:

C:\>query session
  SESSIONNAME USERNAME       ID STATE  TYPE    DEVICE
 >console     Administrator1 0  active wdcon
  rdp-tcp#1   User1          1  active wdtshare
  rdp-tcp                    2  listen wdtshare
                             4  idle
                             5  idle

SESSIONNAME specifies the name assigned to the session.
USERNAME indicates the user name of the user connected to the session.
STATE provides information about the current state of the session.
TYPE indicates the session type.
DEVICE, which is not present for the console or network-connected sessions, is the device name assigned to the session.

The comment following session information is from the session profile. Any sessions in which the initial state is configured as DISABLED do not show up in the query session list until they are enabled.

The User Access permission type grants the following special permissions: Query Information, Logon, and Connect. These special permissions allow a user to: Log on to a session on the terminal server. Query information about a session. Send messages to other user sessions. Connect to another session.

Permissions are set under:

Terminal Services Configuration | Connections | Properties | Permissions | Advanced | Permissions

Examples

Display information about all active sessions on server64:

C:\> query session /server:Server64

Display information about active session MODEM02:

C:\> query session MODEM02

“Once men are caught up in an event, they cease to be afraid. Only the unknown frightens men” - Antoine de Saint-Exupery

Related:

Query Process - Display processes (TS/Remote Desktop)
Query TermServer - List all servers (TS/Remote Desktop)
Query User - Display user sessions (TS/Remote Desktop)
Reset Session - Delete a Remote Desktop Session
LOGOFF - Log a user off
TSSHUTDN - Remotely shut down or reboot a terminal server
CHANGE - Change Terminal Server Session properties
MSTSC - Terminal Server Connection (Remote Desktop Protocol)


© Copyright SS64.com 1999-2014
Some rights reserved