Solved

Terminal Service Manager console session

Posted on 2009-05-09
9
590 Views
Last Modified: 2012-08-13
I have a Win2003 R2 terminal server.  Users login using RDP.  When I launch the Terminal Server Management console I want to see who has logged in and who has logged out.  It use to save this infomation for me for a couple of days now it does not.  I recently did some MS security updates to the box.  Event log gives me printers and such of people who have logged in but they are anonymous.  I have gone into tools >options in TS Manger and checked the box that says Remember Server Connections, that does not seem to keep the users sessions for me.  Currently when a user log's into the box I see them during their session but when they log out you can not longer see any of the session information ie USER/Processes/Information-including IP address etc.  Could my tsadmin.exe be corrupt and if so how do you replace it.  Also does that carry all my licensing info and configuration info.  Please help.
0
Comment
Question by:NDB1234
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
9 Comments
 
LVL 5

Expert Comment

by:DTAHARLEV
ID: 24344498
when you say "save this information", do you mean it'd show inside terminal server mgmt? also, are you sure it's not that the users are now logging off instead of disconnecting?
0
 
LVL 84

Expert Comment

by:oBdA
ID: 24344516
The terminal server management console *never* kept a history of RDP connections. What you might have seen until now are *disconnected* sessions, but these are *not* "old" sessions of uses having logged out, these are sessions that are still open and using resources, where only the connection to the client has been closed.
In other words: it is perfectly normal if logged out users are disappearing in the TSM console.
You will have to use auditing on whatever server is authenticating the user logons to find out who logged on when.
0
 
LVL 5

Expert Comment

by:DTAHARLEV
ID: 24344547
oBdA is right; also, the "remember server connections" checkbox has nothing to do with this i'm afraid
0
Free Webinar: AWS Backup & DR

Join our upcoming webinar with experts from AWS, CloudBerry Lab, and the Town of Edgartown IT to discuss best practices for simplifying online backup management and cutting costs.

 

Author Comment

by:NDB1234
ID: 24344552
Thanks for the help.

How do you use auditing?  Why then when a user logged out of my TS did i still see the session information?  I really just need to see who is coming and going on my box. With that said a user with TS rights logs intot he box.  How can i see that they came and went.  All the services on the box start just fine

thanks again
0
 
LVL 5

Accepted Solution

by:
DTAHARLEV earned 125 total points
ID: 24344566
configure group policy to audit successful authentication events on this machine, for instance, and go through those logs (you can filter them in the security event log). remember that disconnecting from a session (using the yellow x or by clicking start / disconnect) is totally different than logging off (start / logoff)
0
 

Author Comment

by:NDB1234
ID: 24344591
my users click start>logoff
its just before, after they did that i would still see that they came when i opened Terminal server Manager.  I'll take a look at the policys i have set.  Any rec. on a management tool ? thanks
0
 
LVL 84

Assisted Solution

by:oBdA
oBdA earned 125 total points
ID: 24344596
How to track users logon/logoff
http://support.microsoft.com/kb/556015

You never saw information from *logged* *out* users; the TS manager only manages and displays live sessions. As I said, what you saw were *disconnected* sessions.
0
 
LVL 84

Expert Comment

by:oBdA
ID: 24344606
It's not unusual for a terminal session not to close properly, even though the user "logged off"; in other words: your TS might now be running better than before ...
0
 
LVL 5

Expert Comment

by:DTAHARLEV
ID: 24344619
oh yes, one of the cases in which this happens is when it tries to synchronize offline files and stops; the user is already long gone but the session freezes
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Technology opened people to different means of presenting information, but PowerPoint remains to be above competition. Know why PPT still works today.
Having trouble getting your hands on Dynamics 365 Field Service or Project Service trial? Worry No More!!!
The view will learn how to download and install SIMTOOLS and FORMLIST into Excel, how to use SIMTOOLS to generate a Monte Carlo simulation of 30 sales calls, and how to calculate the conditional probability based on the results of the Monte Carlo …
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question