Systems and methods are provided for collecting, distributing and managing notifications of user presence. More specifically, systems and methods are provided for collecting notifications of user presence that are generated by a first IHS and distributing the notifications of user presence to a second IHS for notification, aggregation and/or analysis of user presence events. In some embodiments, notifications of user presence may be collected from the first IHS and distributed to the second IHS to provide notification of user presence events to the second IHS (or a user of the second IHS). In other embodiments, the notifications of user presence generated by the first IHS may be aggregated and/or analyzed by the second IHS to generate various metrics for the user presence events that occur at the first IHS. In doing so, the disclosed embodiments enable security (and other policies) to be set in a data-based, empirically driven way.