Windows devices missing from Account Session report while macOS devices appearSolved

Hi @margaret,

If macOS devices appear but Windows devices do not, even with the Windows platform filter enabled, the most common cause is that Windows logon event auditing is not enabled at the OS level. The Hexnode agent depends on the Windows logon event data to populate Account Session entries.

On older Windows agent versions, this can be enabled manually by running PowerShell as Administrator and executing:

After enabling it, allow the Windows device to come online, sign in to a user account again, and then check the Account Session report after the device syncs.

For current Hexnode Windows Agent versions, this auditing requirement is handled automatically by the agent. If you are still seeing missing Windows session data, make sure the Windows devices are online and running the latest Hexnode Agent, then recheck: Reports > Built-in Reports > Local Account > Account Session.

Regards,
Sienna Carter
Hexnode UEM

Does the logged-in account type matter here? In our case, the Windows device had a standard network account that may have been logged off. I was wondering if that would stop the report from showing the device completely.

Hi @margaret,

The account type itself is not usually the issue. The report is populated from Windows logon events captured from the device. If the required logon auditing was disabled earlier, Hexnode may not have had any session event data to report for that Windows device.

Once auditing is enabled, either manually with the PowerShell command on older agent versions or automatically through the updated Hexnode Windows Agent, new login events should begin appearing after the device checks in. A fresh sign-out/sign-in or restart can help generate new session events for reporting.

Regards,
Sienna Carter
Hexnode UEM

That explains why the macOS entries were showing but Windows was blank. We’ll update the Windows agent and keep the devices online, then check the Account Session report again after users log in.