This is really a two-part question....

Here's the senario:  A notification goes out that a node has been rebooted.

I want to be able to include the logged in user on the node when the node gets rebooted

Q1.  Is there an out-of-box application (would this be part of LEM?) that can poll remote desktop logon info?

Q2. Can you then, (once polled) script advanced alert manager to include this polled info along with the node reboot information?

Thank you,