Go Back   TechArena Community > Technical Support > Computer Help > Windows Security
Become a Member!
Forgot your username/password?
Register Tags Active Topics RSS Search Mark Forums Read SiteMap

Tags: , ,

Sponsored Links



Remote Desktop- Any logging?

Windows Security


Reply
 
Thread Tools Search this Thread
  #1  
Old 24-10-2007
Sam
 
Posts: n/a
Remote Desktop- Any logging?

Are there any logs created on the host machine showing when someone made a
RDP connection. I would like to know what user and what IP address was used
to establish a connection.
Reply With Quote
  #2  
Old 24-10-2007
Sam
 
Posts: n/a
I have auditing turned on and see type 528 but no 10's when I connect
remotely? where do I find the firewall logs?

I see where the 10 comes in.

found the firewall log too. Guess it is not there by default.
Reply With Quote
  #3  
Old 25-10-2007
Steven L Umbach
 
Posts: n/a
Re: Remote Desktop- Any logging?

There should be an entry in the security log available via Event Viewer if
auditing of logon events is enabled which it may be by default. Look for
type 10 logon events. However you may need see the IP address but instead
the name of the computer. Firewall logs [hardware or host] may help track
down the IP of the computer if you match the logs to the time of the type 10
logon event.
Reply With Quote
  #4  
Old 26-10-2007
Steven L Umbach
 
Posts: n/a
Correct. I should have mentioned that you need to enable logging of the
Windows Firewall first. If the Windows Firewall does not show the needed
info you may want to try a third party software firewall. Sygate used to
excel at logging but I don't believe it is around anymore though you may
still find places to download it.
Reply With Quote
  #5  
Old 09-12-2009
Member
 
Join Date: Dec 2009
Posts: 1
Re: Remote Desktop- Any logging?

Hellooooo, can any one help me wit rdp
tanx
Reply With Quote
  #6  
Old 11-12-2009
JuliusPIV
 
Posts: n/a
Re: Remote Desktop- Any logging?

I don't see one either - what is the problem specifically?

Taking a guess based on the Subject, check the Windows XP Security Event
Viewer Log. An Audit Policy may be configured using the Group Policy editor
to track logon success and failures:
From the Start | Run command window type gpedit.msc.
Navigate to Local Computer Policy | Computer Configuration | Windows
Settings | Security Settings | Local Policies | Audit Policy | Audit logon
events.
Highlight and right-click and select properties.
Configure as desired.

Note that logging in without a password is logged as a failure. This results
in the security log filling up very fast if you log failures and have a user
without a password. The result is you can not login normally. Also note, not
having a password is a potential and probable security risk.

The event log can be viewed by going to Start | Control Panel | Performance
and Maintenance | Administrative Tools and click on Event Viewer.

The Event Log (Security) noting a successful logon and logoff by a remote
user. The user can highlight a log entry and right-click to view the event
Properties for detailed information.

Look in the Security Event Log for a Logon/Logoff Event 528 and Logon Type
10.

The free Microsoft Port Reporter tool provides for additional logging.
Description of the Port Reporter Parser (PR-Parser) tool
http://support.microsoft.com/default...b;en-us;884289

Availability and description of the Port Reporter tool
http://support.microsoft.com/kb/837243
Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Security


Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Remote Desktop- Any logging?"
Thread Thread Starter Forum Replies Last Post
Remote Desktop gives error and turns off while logging on it Donoho Networking & Security 5 08-07-2011 11:03 PM
Unable to change display settings on remote Server when remote desktop to 2008 Lon Networking & Security 5 19-04-2011 11:37 PM
Cannot Remote Desktop to servers Even if in Remote Desktop Users Group Scott Townsend Windows Server Help 5 20-04-2010 02:05 AM
Error connecting to existing session when logging on to remote desktop Vineeta Networking & Security 4 04-08-2009 03:12 PM
Blank Desktop or no desktop after logging to Windows XP appueye Monitor & Video Cards 3 29-01-2009 11:19 AM


All times are GMT +5.5. The time now is 05:59 PM.