Using the Symantec Management Platform server, I would like to be able to create a filter based on an end-user being logged off the computer. Or, in some cases, I might want to see only computers that have an end-user logged into them.
The first thing to realize is this information is based on events coming into the Symantec Management Platform (SMP) server. You should first make sure that this event is being tracked, and has not been turned off. Found under Settings > Agents/Plug-ins > Symantec Management Agent > Global Agent Settings.
In particular we want to make sure that AeX Client LogOn is checked.
Navigate to Manage > Computers.
Expand Favorites and click on Installed Agents.
As shown in the following screenshot, please expand the filtering and the Add Filter Criteria section. Click on the pencil icon to edit criteria.
As shown in the following screenshot, under the manage filter criteria dialogue box, search for the word logged. When found under views, click the box that says IsUserLoggedOn. Click OK once checked.
As shown in the following screenshot, click the drop-down once again, and find User Logged On (vAC_ComputerState). Select it.
As shown in the following screenshot you can now type in that dialogue box. A 0 means not logged on, and a 1 means logged on. The screenshot also shows an arrow pointing to the view filter results reports. If you want to click that to get the SQL used to create this, you can. Finally, click on the disk icon with the pencil to save this a filter. Once saved, you can use it on your client task job to schedule against.