If anyone’s interested, I’ll upload the powershell I used to get RDP session info. I did the following steps:
-
create a test group in SCOM
-
wrapped Quser in powershell to perform some logic.
-
creates custom event IDs if disconnected/idle (//temporary) session found
-
SCOM reads these events
-
made a very basic dash to list who is being idle on which servers!
-
potential to respond to alert to end sessions as required.