We are trying to monitor which machines get use and which don't. Is there a way to find out a break down of how long any user has been logged into a machine? Such as 9 out of 24 hours someone was logged into this machine.
This MSDN blog should point you in the right direction .I think the best way to check this is to see the eventlogs.
They are all found in the Security event log. The pre-Vista events (ID=5xx) all have event source=Security. The Vista/WS08 events (ID=4xxx) all have event source=Microsoft-Windows-Security-Auditing.
528 / 4624 LOGON538 / 4634 LOGOFFN/A / 4800 WORKSTATION_LOCKED * / 4801 WORKSTATION_UNLOCKEDN/A / 4802 SCREENSAVER_INVOKEDN/A / 4803 SCREENSAVER_DISMISSED
By checking these 5 types of events, you can see the logon/logof time, (un)locked workstation time and screensaver times.I checked my own security log, and unfortunately 4624 does show to much (rendering this suggestion useless).