parses output from users.exe on windows