Get-IdleTime fails to parse disconnected sessions

[tobraha]

When a session is disconnected ("DISC") the SESSIONNAME field is empty and is not properly parsed:

PS C:\WINDOWS\system32> quser
 USERNAME              SESSIONNAME        ID  STATE   IDLE TIME  LOGON TIME
 jsmith                                    1  Disc        14:36  3/24/2021 9:46 AM

This fails to properly tokenize the output and parse the fields:

quser /server:$CN_Item |
    Select-Object -Skip 1 |
    ForEach-Object {($_ -replace '\s{2,}', ',').Trim()} |
    ConvertFrom-Csv -Header $Header

I've been trying to find a way to use something other than 'query user' or 'quser' to get this info. Apparently it queries the Terminal Services API (? Can't find the reference I thought I saw yesterday... ☹️ ) to get this info.

How else could we find user idle time??

[tobraha]

I'm wondering if we could cherry pick some of the functionality from PSReflect-Functions to accomplish this. Looks like it uses wtsapi32 to query user sessions.