Monitoring server logons

I need to monitor when people logon to a Windows server through RDP or from the console.
How can I do this?
itinsideAsked:
Who is Participating?
 
Wonko_the_SaneConnect With a Mentor Commented:
Pretty simple:
use the local policy or GPO to configure auditing

For local:
gpedit.msc
browse to Computer Config\Windows Settings\Security Settings\Audit Policy

Enable Auditing for "Audit Logon Events".

Any logons will then be logged in the security log.
0
 
itinsideAuthor Commented:
The boxes are greyed out.
This is a domain controller, does this matter?
0
 
Wonko_the_SaneConnect With a Mentor Commented:
Yes, that does matter.
In this case you can do the same in the "Default Domain Controllers" Policy in Active Directory.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.