Terminal Service Manager console session

I have a Win2003 R2 terminal server.  Users login using RDP.  When I launch the Terminal Server Management console I want to see who has logged in and who has logged out.  It use to save this infomation for me for a couple of days now it does not.  I recently did some MS security updates to the box.  Event log gives me printers and such of people who have logged in but they are anonymous.  I have gone into tools >options in TS Manger and checked the box that says Remember Server Connections, that does not seem to keep the users sessions for me.  Currently when a user log's into the box I see them during their session but when they log out you can not longer see any of the session information ie USER/Processes/Information-including IP address etc.  Could my tsadmin.exe be corrupt and if so how do you replace it.  Also does that carry all my licensing info and configuration info.  Please help.
NDB1234Asked:
Who is Participating?
Advertise Here
 
DTAHARLEVConnect With a Mentor Commented:
configure group policy to audit successful authentication events on this machine, for instance, and go through those logs (you can filter them in the security event log). remember that disconnecting from a session (using the yellow x or by clicking start / disconnect) is totally different than logging off (start / logoff)
0
 
DTAHARLEVCommented:
when you say "save this information", do you mean it'd show inside terminal server mgmt? also, are you sure it's not that the users are now logging off instead of disconnecting?
0
 
oBdACommented:
The terminal server management console *never* kept a history of RDP connections. What you might have seen until now are *disconnected* sessions, but these are *not* "old" sessions of uses having logged out, these are sessions that are still open and using resources, where only the connection to the client has been closed.
In other words: it is perfectly normal if logged out users are disappearing in the TSM console.
You will have to use auditing on whatever server is authenticating the user logons to find out who logged on when.
0
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Access It Now
 
DTAHARLEVCommented:
oBdA is right; also, the "remember server connections" checkbox has nothing to do with this i'm afraid
0
 
NDB1234Author Commented:
Thanks for the help.

How do you use auditing?  Why then when a user logged out of my TS did i still see the session information?  I really just need to see who is coming and going on my box. With that said a user with TS rights logs intot he box.  How can i see that they came and went.  All the services on the box start just fine

thanks again
0
 
NDB1234Author Commented:
my users click start>logoff
its just before, after they did that i would still see that they came when i opened Terminal server Manager.  I'll take a look at the policys i have set.  Any rec. on a management tool ? thanks
0
 
oBdAConnect With a Mentor Commented:
How to track users logon/logoff
http://support.microsoft.com/kb/556015

You never saw information from *logged* *out* users; the TS manager only manages and displays live sessions. As I said, what you saw were *disconnected* sessions.
0
 
oBdACommented:
It's not unusual for a terminal session not to close properly, even though the user "logged off"; in other words: your TS might now be running better than before ...
0
 
DTAHARLEVCommented:
oh yes, one of the cases in which this happens is when it tries to synchronize offline files and stops; the user is already long gone but the session freezes
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.