Track Remote Desktop Connections?

  • Thread starter Thread starter Joseph Scalise
  • Start date Start date
J

Joseph Scalise

We have Windows 2000 servers that can be accessed with proper admin password
through Win XP Remote Desktop Connection on client computers. Only users
that have the password can log in remotely, however is there anyway to track
or tell if a remote connection is made? Does the server (Windows 2000) log
this type of connection in the Event Viewer anywhere, or anywhere else?

Thanks for your help!

Please excuse the crosspost, originally posted in public.security, located
this more specific newsgroup aftwards.

-Joe
 
Enable auditing of logon events in the security policy of the computers you
want to find this information on. You can do this in Local Security Policy
or at the domain/OU level. An event will be recorded for each logon attempt.
In Windows 2000 it may look like a console type 2 logon but I believe in
Windows XP Pro/2003 it will show as logon type 10 for RDP logons. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;en-us;q248260 -- example
of how to enable local auditing.
 
Back
Top