How do I find out who have been logged on

3 posts in this topic

Would like to see who have been logged on locally to my server the last week.

Only RDP user logons and not service logons.

Is that possible without looking security log manually?


Share this post

Link to post
Share on other sites

The regular security log doesn't seem to have that. I've found some things in this container in Applications and Services Logs -> Microsoft -> Windows:

Event ID 8001 in Operational log of GroupPolicy

Completed user logon policy processing for DOMAIN\RDPUser in 4 seconds

There may be more locations that are logged automatically. Maybe in your Security log, but mine just shows Audit results and none of them were showing any RDP logons.


Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.