SELECT * FROM OPENQUERY(linked_server, 'SELECT * FROM [User]')
Replace linked_server
with the name of the linked server you created to connect to Salesforce.
The User
table is enclosed with square brackets as "User" is a reserved word in SQL and ODBC.