Scenario: You need to discover who is logged into a server. Open a cmd prompt and type the following then hit enter and you will see the response below the command:
C:\Users\probeson>qwinsta /server:fljaxaddc01d SESSIONNAME USERNAME ID STATE TYPE DEVIC services 0 Disc console 1 Conn rdp-tcp#0 probeson 2 Active rdpwd rdp-tcp 65536 Listen
To kill the connection by probeson, use the below command with his session ID: