Monitor/Record Windows XP RDP session
Posted on 2009-07-08
I have someone who believes that an ex-employee is getting into one of their computers. What they have described sounds almost like a plain RDP session on an XP machine (The computer says it is locked and in use by the user when they've logged in remotely). This got me wondering exactly how I could go about finding out what they are doing if this is the case. Is there a way in XP to log the IP address and time of RDP connections, and is there a piece of software that will log what files they access and programs they open when they have the session open?