Remote Connection Activity by User report

lbit
lbit used Ask the Experts™
on
I am trying to find out if a user is logging in remotely to their PC.  I know that they do, but the boss wants to verify the person is logging in as often as they say.  I look at the extended usage version of the Remote Connection Activity by user report, and I see 3 users (including me) having activity.  But I don't see this one user or 2 others that I am positive log into remote web workplace.  I even ran the report for the entire year to date.

It looks like the users on the report are people who use the VPN Small Business Server connection.  I use that sometimes, but not always.  What I am trying to get is users logging on to my RWW via a website.  Those don't seem to show up.  How do I get a report on my RWW users?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Check your Default Website logs (if the logging is turned on).
Usual location is c:\windows\system32\logfiles\W3SVC1
If they login via RWW they will appear in these logs.

Author

Commented:
Thanks - have the log files and reading another post I think I am looking for entries of Get/remote/default.aspx, right?  But how do I tell which user or PC was initiating the log on?

And is combing through the logs the only way to get this?
Co-Owner
Top Expert 2011
Commented:
That sounds right.
If the logs show all possible items in them then the user should be listed in the same line.

Author

Commented:
I also found entries of Get /remote/tsweb that show the user id and Pc logging into.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
That should keep your boss happy!  Happy reading ;-)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial