Skip to content

MachineUserHistory

User logon history information

Fields

Field Type Description
CitrixSession bit True if the Scan was made in a Citrix terminal server context. detection of Citrix not always reliable depending on scanner invocation,
Created datetime2 Date/Time this relation got created. This is not the scan time but usually the import time. 
EntraIdDeviceId uniqueidentifier Entra ID device id,
EntraIdIdpDomain nvarchar Entra ID identity provider domain,
EntraIdJoinType nvarchar Entra ID join type for this machine or this user,
EntraIdJoinUserEmail nvarchar Mail address used to join Entra ID
EntraIdTenantDisplayName nvarchar Display name for this Entra ID tenant
EntraIdTenantId uniqueidentifier Entra ID tenant id,
EntraIdUserInfoUserEmail nvarchar Email from Entra ID join info user info,
EntraIdUserInfoUserKeyId uniqueidentifier User id from Entra ID join info user info,
EntraIdUserInfoUserKeyName nvarchar User key name from Entra ID join info user info
ID bigint Internal ID for the MachineUserHistory entity (Primary Key)
LocalAdministrator bit True if the user was member of the machine's local Administrators group at time of logon
MachineUserID bigint Internal ID that references the MachineUser entity (Foreign Key)
MsftDirectAccess bit True if the machine was connected to the network via Microsoft Direct Access at time of scan,
OctoscanBuildInfo nvarchar Detailed build information of the scanner that scanned this machine to user relation,
OfflineScan bit True if this record was generated by an offline scan (OctoOffline.exe),
RemoteSession bit True if the user was in a remote session with the machine,
Scan datetime2 Date/Time this machine to user relation was scanned
ScanGUID uniqueidentifier GUID of the scan file that scanned this machine to user relation
ScannedAsAdministrator bit True if the scan run with Administrator privileges,
ScannerBaseFolder nvarchar Path to a folder from where the scanner was started
ScannerTag nvarchar Command-line tag that was specified on the scan of this machine to user relation history record
SessionName nvarchar Session name of the terminal session,