UserProfiles collector

The UserProfiles collector gathers data about local users on managed devices.

Collector output

Field	Type	Description
accountdisabled	String	`True` if the account is disabled. `False` otherwise. ^[a]
domain	String	The domain that holds the user. *
fullname	String	The user's full name. *
installdate	Timestamp	The creation date for the user's home folder (`C:\Users\user-name`). The user must log in at least once for this date to be returned.
localaccount	String	`True` if the user is stored locally on the device. `False` otherwise.
lockedout	String	`True` if the user has been locked out from the device. `False` otherwise. *
accountname	String	The user's account name.
sid	String	The security identifier for the user.
passwordexpires	String	`True` if the password is configured to expire. `False` otherwise. *
^[a]This field is not returned for non-local users.

Supported versions

Windows	Linux	macOS
3.0 and later	3.0 and later	3.0 and later

Example: Find user accounts that have been locked out from devices.

UserProfiles where UserProfiles lockedout equals "true"

Example: Find user accounts that have been locked out from devices.

UserProfiles where UserProfiles lockedout equals "true"