SSCC - Winstat Reports

Winstat Reports

Please choose a report to run

Start date

End date

Username*

Server name*

For a prompt response it's best to select no more than a few day period for login time reports

With this report, searching for 'sas' will match all programs with 'sas' anywhere in the path text

To use wildcards, add a * to the beginning or end of the program name

Export to Excel

Last 75 events

Time	Name	Machine	Desc	User	Sess	CPU
08/26/26 09:25:44 AM	firefox	WINSTAT-212	Started	PRIMO\vachuska	2
08/26/26 09:25:43 AM	acrodist	WINSTAT-211	Ended	PRIMO\hyoon76	6	500
08/26/26 09:25:34 AM	mspaint	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:31 AM	backgroundTaskHost	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	62
08/26/26 09:25:31 AM	TSTheme	SILO-227	Ended	PRIMO\pebergmann	4	31
08/26/26 09:25:29 AM	conhost	SILO-227	Ended	PRIMO\pebergmann	4	125
08/26/26 09:25:29 AM	Bginfo64	SILO-227	Ended	PRIMO\pebergmann	4	156
08/26/26 09:25:29 AM	backgroundTaskHost	WINSTAT-217	Ended	PRIMO\jldykema	4	250
08/26/26 09:25:28 AM	RuntimeBroker	WINSTAT-217	Started	PRIMO\jldykema	4
08/26/26 09:25:28 AM	backgroundTaskHost	WINSTAT-217	Started	PRIMO\jldykema	4
08/26/26 09:25:28 AM	powershell	SILO-227	Ended	PRIMO\pebergmann	4	797
08/26/26 09:25:28 AM	Bginfo64	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:26 AM	powershell	SILO-227	Ended	PRIMO\pebergmann	4	406
08/26/26 09:25:26 AM	powershell	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:26 AM	backgroundTaskHost	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	47
08/26/26 09:25:26 AM	AtBroker	SILO-227	Ended	PRIMO\pebergmann	4	31
08/26/26 09:25:25 AM	wscript	SILO-227	Ended	PRIMO\pebergmann	4	62
08/26/26 09:25:25 AM	taskhostw	SILO-227	Ended	PRIMO\pebergmann	4	47
08/26/26 09:25:25 AM	LogonUI	SILO-227	Ended	NT AUTHORITY\system	4	172
08/26/26 09:25:25 AM	powershell	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	conhost	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	AtBroker	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	cmd	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	47
08/26/26 09:25:25 AM	Bginfo64	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	172
08/26/26 09:25:25 AM	conhost	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	31
08/26/26 09:25:25 AM	CtxGfx	SILO-227	Ended	NT AUTHORITY\system	21	125
08/26/26 09:25:25 AM	fontdrvhost	SILO-227	Ended	FONT DRIVER HOST\...	21	16
08/26/26 09:25:25 AM	LogonUI	SILO-227	Ended	NT AUTHORITY\system	21	250
08/26/26 09:25:25 AM	winlogon	SILO-227	Ended	NT AUTHORITY\system	21	78
08/26/26 09:25:25 AM	dwm	SILO-227	Ended	WINDOW MANAGER\dw...	21	31
08/26/26 09:25:25 AM	wscript	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	taskhostw	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	powershell	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	656
08/26/26 09:25:25 AM	Bginfo64	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:25 AM	10.130.22.227	SILO-227	SessionUnlock	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	10.130.22.227	SILO-227	RemoteConnect	PRIMO\pebergmann	4
08/26/26 09:25:25 AM	TSTheme	SILO-227	Started	PRIMO\pebergmann	4
08/26/26 09:25:25 AM		SILO-227	RemoteDisconnect		21
08/26/26 09:25:23 AM	conhost	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	31
08/26/26 09:25:23 AM	powershell	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	281
08/26/26 09:25:23 AM	quser	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	16
08/26/26 09:25:23 AM	powershell	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	422
08/26/26 09:25:23 AM	query	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	16
08/26/26 09:25:23 AM	powershell	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:23 AM	quser	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	wscript	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	62
08/26/26 09:25:22 AM	powershell	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	query	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	conhost	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	acrodist	WINSTAT-211	Started	PRIMO\hyoon76	6
08/26/26 09:25:22 AM	gpscript	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	31
08/26/26 09:25:22 AM	cmd	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	conhost	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	powershell	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	wscript	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:22 AM	gpscript	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:20 AM	rundll32	WINSTAT-S209	Ended	PRIMO\rawilliams6	14	16
08/26/26 09:25:19 AM	mspaint	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:19 AM	VdaRedirector	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:25:13 AM	acrotray	SILORD-004	Started	PRIMO\wcarpenter2	7
08/26/26 09:25:10 AM	splwow64	WINSTAT-211	Started	PRIMO\hyoon76	6
08/26/26 09:25:07 AM	WINWORD	WINSTAT-S208	Ended	PRIMO\whitzel	14	62
08/26/26 09:25:06 AM	python	WINSTAT-214	Ended	PRIMO\sguo88	4	1969
08/26/26 09:25:06 AM	conhost	WINSTAT-214	Ended	PRIMO\sguo88	4	78
08/26/26 09:25:06 AM	cmd	WINSTAT-214	Ended	PRIMO\sguo88	4	78
08/26/26 09:25:06 AM	conda	WINSTAT-214	Ended	PRIMO\sguo88	4	31
08/26/26 09:25:06 AM	firefox	WINSTAT-212	Ended	PRIMO\vachuska	2	125
08/26/26 09:25:04 AM	WINWORD	WINSTAT-S208	Started	PRIMO\whitzel	14
08/26/26 09:25:04 AM	python	WINSTAT-214	Started	PRIMO\sguo88	4
08/26/26 09:25:03 AM	conhost	WINSTAT-214	Started	PRIMO\sguo88	4
08/26/26 09:25:03 AM	cmd	WINSTAT-214	Started	PRIMO\sguo88	4
08/26/26 09:25:03 AM	conda	WINSTAT-214	Started	PRIMO\sguo88	4
08/26/26 09:24:57 AM	WINWORD	WINSTAT-S208	Ended	PRIMO\whitzel	14	94
08/26/26 09:24:55 AM	rundll32	WINSTAT-S209	Started	PRIMO\rawilliams6	14
08/26/26 09:24:54 AM	WINWORD	WINSTAT-S208	Started	PRIMO\whitzel	14
681 million total events