Jump to content

Recommended Posts

Posted

we have an windows 2003 server that is used as an application server,

apparently some people log in remotely to the console itself,

is there a log of all connections that we could use to identify these users?

 

thanks in advance

 

--Ilann

  • Replies 2
  • Created
  • Last Reply

Popular Days

Guest Coraleigh Miller
Posted

Re: log sessions

 

Hi ilann,

 

These are tracked in the server's Event Log -> Security as id 528 and id

538.

 

Coraleigh Miller

 

"ilann" <ilann@free.fr> wrote in message

news:u2LDtlc5HHA.5424@TK2MSFTNGP02.phx.gbl...

> we have an windows 2003 server that is used as an application server,

> apparently some people log in remotely to the console itself,

> is there a log of all connections that we could use to identify these

> users?

>

> thanks in advance

>

> --Ilann

>

Guest Coraleigh Miller
Posted

Re: log sessions

 

Also within the Terminal Services Manager you will be able to see if someone

is currently logged on to the console as their session ID will be 0.

 

Coraleigh Miller

 

"ilann" <ilann@free.fr> wrote in message

news:u2LDtlc5HHA.5424@TK2MSFTNGP02.phx.gbl...

> we have an windows 2003 server that is used as an application server,

> apparently some people log in remotely to the console itself,

> is there a log of all connections that we could use to identify these

> users?

>

> thanks in advance

>

> --Ilann

>


×
×
  • Create New...