asked on

Terminal Services - disconnects

I have an environment where there are remote users accessing a central Terminal Server through the Internet - relatively high speed ADSL at both ends. The remote users complain of disconnects - they are suddenly booted off the system. Unfortunately they are too busy to do anything at the time other than just try logging in/rebooting that they don't report the exact time of the event. Is there an event log item that I could correlate to such disconnects/reconnects? If not, are there tools that would give me times of such disconnects/reconnects?

sherenian

You should be able to look in the Event Viewer and see when a specific user logged on or authenticated to the server and then you should see a second time where he authenticated. The time stamps on the two authentications will tell you when they logged in and the duration between the two will tell you how long it took for them to get booted off.

The Event Viewer is under Administrative Tools

Line One

ASKER

I believe you can add 'events' to be monitored to Event Viewer. Is there a 'disconnection' event that I could monitor which would be the actual 'kicked off' event with some kind of detail attached to it? I don't want to be looking at regular log offs - I just want disconnects.

ASKER CERTIFIED SOLUTION

sherenian

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial