I have an environment where there are remote users accessing a central Terminal Server through the Internet - relatively high speed ADSL at both ends. The remote users complain of disconnects - they are suddenly booted off the system. Unfortunately they are too busy to do anything at the time other than just try logging in/rebooting that they don't report the exact time of the event. Is there an event log item that I could correlate to such disconnects/reconnects? If not, are there tools that would give me times of such disconnects/reconnects?