terminal services log

mb

Distinguished
Apr 12, 2004
156
0
18,680
Archived from groups: microsoft.public.win2000.security (More info?)

Hi!
Do anyone knows how I can review when and from which PC
a user make a terminal server session to a server W2K?
Thanks
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Enable auditing of logon events on the TS and look in the security log in Event
Viewer for type 2 or type 10 logons. TS logons are not considered type three network
logons. From what I can tell in W2K, the logon events will not show which computer a
user logged on from. I am not sure if type 10 logon does or not which would be
generated on a XP Pro/Windows 2003 computer. --- Steve

http://www.microsoft.com/resources/documentation/WindowsServ/2003/datacenter/proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/datacenter/proddocs/en-us/518.asp

http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/38109/38109.html

"mb" <anonymous@discussions.microsoft.com> wrote in message
news:2c13901c468f6$f8f5fa50$a401280a@phx.gbl...
> Hi!
> Do anyone knows how I can review when and from which PC
> a user make a terminal server session to a server W2K?
> Thanks