How can I track which users have connected to a terminal server?

Is there a way to track which users have connected to a terminal server? Is there a log of some sort?
There's no dedicated log of people connecting to a terminal server, unfortunately. You can, however, see interactive connections (Event 528) that show the name and domain of the user who connected. If the terminal server is not available for console logins, those events should only be for remote access. Additionally, you can restrict user access to the terminal server by disabling the "Allow Logon to Terminal Server" setting in the user account properties for users who should not be connecting.

This was first published in February 2007

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.