in reply to Query current logged in Windows user via WMI
Update: I can get the currently logged on user by looking at the UserName property in Win32_ComputerSystem, but it doesn't tell me when they logged on.