With IPHost Network Monitor you can run WMI Logon Id monitoring of various devices in your network.
To create a WMI monitor for Logon Id, provide host name (it must be a Windows host) and specify custom WQL query:
The LogonId is the ID assigned to the logon session. The application that initiated the session should have called AllocateLocallyUniqueId in order to generate this ID.
The Win32_LogonSession class describes the logon session or sessions associated with a user who has logged on to Windows NT or Windows 2000.
IPHost Network Monitor is an advanced and easy tool for monitoring LAN and WAN networks, network servers, workstations and TCP/IP devices. Use IPHost Network Monitor to monitor your servers, domains, computers and devices.