Log Terminal Services Connections in Windows Server 2003

[Guest Anna_Stephanie]

Hello All,

 

We would like to log all terminal services connections made to one of

our Windows Server 2003 systems. We are running the Terminal Services

Directory Logging service and have made the registry change specified

in the following Microsoft Knowledge Base Article: http://support.microsoft.com/kb/327508.

In addition, in Terminal Services Configuration Manager, we have

enabled auditing logon, logoff, connect, disconnect, etc. for the

everyone group on the server. I do not see any entries in the event

logs or the Terminal Services log file for this information.

 

Any help is appreciated.

 

Thanks.

[Guest Vera Noest [MVP]]

Re: Log Terminal Services Connections in Windows Server 2003

 

So you have a TS farm and a Session Directory server, is that

correct? The session directory records are written to

\system32\Tssdis.log

 

Have you enabled auditing of security events in the security policy

for the server? In TS Configuration, you select which categories of

events to audit, but you must enable auditing in the GPO as well.

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

Anna_Stephanie <ITAnnaJones@gmail.com> wrote on 05 dec 2007 in

microsoft.public.windows.terminal_services:

> Hello All,

>

> We would like to log all terminal services connections made to

> one of our Windows Server 2003 systems. We are running the

> Terminal Services Directory Logging service and have made the

> registry change specified in the following Microsoft Knowledge

> Base Article: http://support.microsoft.com/kb/327508. In

> addition, in Terminal Services Configuration Manager, we have

> enabled auditing logon, logoff, connect, disconnect, etc. for

> the everyone group on the server. I do not see any entries in

> the event logs or the Terminal Services log file for this

> information.

>

> Any help is appreciated.

>

> Thanks.