asked on

Logging Terminal Server Access

I've been asked to keep track of when our servers are accessed using Terminal Services. What is the best way to record the login attempts, both successful and unsuccessful? I don't need to gather information on when the servers are accessed all the time, just when accessed by a teminal service client. Also, is it possible to record information on the computer that is being used in the terminal server session, like computer name or ip address?

ASKER CERTIFIED SOLUTION

Nuno Martins

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Rob Williams

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Rob Williams

Ps- if you want to only log terminal server access add at the start of the script:
If "%computername%" == "TS name" GoTo Logging
GoTo END

and add :END to your script after the logging session

kwylie

ASKER

nfmartins - Sorry for the delay. I was able to get auditing on the 2003 server just fine but had to get a hotfix from Microsoft to get it working on the 2000 server. I am now getting LogOff events in the system log but not logon. Would it safe to try to put a "LogTSLogOn" statement in the registry?

RobWill - I haven't had a chance to review your suggestion yet.

kwylie

ASKER

I'll be trying the script method to see if I can get a list of the logons and will post once that is done.

Nuno Martins

I realy don´t now i never try that, but can set up my test enviroment to test that case.
I will post here the results

kwylie

ASKER

Since the suggestions both members offered allows me to track logon and logoff details, I think I should split the points.

Rob Williams

Thanks kwylie.
Cheers !
--Rob

kwylie

ASKER

Using the suggestions of both members, I can now track logon and logoff events so I split the points hoping that would be fair.

Rob Williams

Very fair, thank you.

getanin

There is a third party tools that provides this information. Data provided by application:
- Session start (date and hour)
- Total, Idle, Active time
- Users states
- Applications opened by user per session
It is available on www.terminalserviceslog.com

Praveen Venu

Hi,
Any option is there by which we can update remote login user activities in a database than in a Log text file.
Thanks & Regards

SHAJ

Rob Williams

Sorry I would be no help with databases, but I am sure with VBS you could do so. I believe www.terminalserviceslog.com does create its own database.