Is it possible to enable logging of RDP connections / disconnections under Windows XP and Windows 7?

Posted by Jon Cage on Server Fault See other posts from Server Fault or by Jon Cage
Published on 2010-04-09T15:51:47Z Indexed on 2010/04/09 15:53 UTC
Read the original article Hit count: 470

Filed under:

rdp

|

eventviewer

|

event-log

|

connection

|

disconnection

As the title suggests, I'm trying to keep an eye on RDP connections / disconnections to a couple of machines. One's running Windows XP and one's running Windows 7.

I've checked the event logs on the Windows XP machine and there's nothing mentioned in there. Is it just a Windows 2003 Server feature?

© Server Fault or respective owner

Related posts about rdp

RDP issue..RDP not working providing logon to access on user id

as seen on Server Fault - Search for 'Server Fault'
I got a request to provide logon to access to one of Windows 2008 server, after I added this server on user's logon to list and given local admin access to server. I am not able to take RDP session. Its giving error.. Local Security authority failed to connect... I see Event ID 56 ..Source Termdd When… >>> More
Remmina remoteapp over RDP

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I was wondering how to use remmina to open applications on a Windows machine over rdp using remoteapp (or seamless or whatever it's actually called). I've already used Kim Knight's RemoteApp Tool to set up remoteapp on a Windows 7 machine and I can connect and run remote apps fine from another windows… >>> More
Using gnome-boxes with Remote Desktop Connection

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
in the past I used to connect to my windows server from ubuntu with remmina (through rdp protocol). I've recently installed ubuntu gnome remix (12.10.1) and gnome-boxes and I'm wondering if I can do the same with gnome-boxes. I've tried creating a new item in gnome-boxes and entering as url "rdp://x… >>> More
xrdp and xfce4 Ubuntu 14.04 slow refreshrate

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I am running Ubuntu 14.04 LTS 32bit and I am connecting via windows rdp to my ubuntu machine that has xrdp with xfce4 session. Network is 40mbps/5mbps. RDP to a windows machine from a windows machine is flawless from same location. I can connect fine, but the refresh rate is horrible. When it fist… >>> More
How to configure XRDP to start cinnamon as default desktop session

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I was wondering if there is a way to make Cinnamon 1.4 the default environment upon logging in to Ubuntu 12.04. I can install Cinnamon 1.4 without any problems, but I am trying to run XRDP to log in from a Windows machine and would like it to start "Cinnamon session" instead of a Unity session by… >>> More

Related posts about eventviewer

Unknown and strange RDP successful logins in EventViewer

as seen on Server Fault - Search for 'Server Fault'
I have a Windows Server 2008 R2 with a valid IP, and recently I've found hundreds of unknown and strange RDP successful logins logged in EventViewer. Here are some details: They are not similar to normal logins, they happen like every second in a while even when I myself am logged in to the server… >>> More
How can I view a .evt file saved with the Event viewer of another computer?

as seen on Server Fault - Search for 'Server Fault'
I have a .evt file saved with the EventViewer of another computer. I think I can use my computer's EventViewer as long as I have the same version of the OS. Are there any other alternatives? >>> More
How can I view a .evt file saved with the Event viewer of another computer?

as seen on Stack Overflow - Search for 'Stack Overflow'
I have a .evt file saved with the EventViewer of another computer. I think I can use my computer's EventViewer as long as I have the same version of the OS. Are there any other alternatives? >>> More
Event 4098, 0x80070533 Logon failure: account currently disabled?

as seen on Server Fault - Search for 'Server Fault'
Having started to upgrade our PCs to Windows 7 we have noticed that we are getting group policy warnings in Event Viewer such as: "The user 'Word.qat' preference item in the 'a_Office2007_Users {A084A37B-6D4C-41C0-8AF7-B891B87FC53B}' Group Policy object did not apply because it failed with error… >>> More
Event 36888 : The following fatal alert was generated: 10. The internal error state is 1203

as seen on Server Fault - Search for 'Server Fault'
I search on the Internet, but i am unable to find, Why this error is coming? It has flooded my Event Viewer, after interval of 1 minutes, this Error pops-up. ( means the frequency is 1 minutes ) I didn't have any IIS installed. This server is purely Domain controller and no other role has been… >>> More