Wednesday 28 April 2010

Windows : Audit recent RDP logins

If the login/logoff is being audited in group policy (default?)
  • Event log id 682 in the security log shows all log on events including
    client name and ip
  • Event log id 683 in the security log shows all log off events including client name and ip


0 comments: