<div>
you can sort the security logs in the event viewer by Event and look for event code 528.
</div>


you can sort the security logs in the event viewer by Event and look for event code 528.

<div>
That's laughable. The security log on my rather small domain only goes back 2 days because of all the domain chatter in there. Now that I want to know why it appears that user X accessed the server (and when), it's likely WAY too late. Out of the box, my Unix login logs go back to the beginning of the prior month.<br />
<br />
LOL! WHY would a server OS not track logins? LOL!<br />
<br />

</div>


That's laughable. The security log on my rather small domain only goes back 2 days because of all the domain chatter in there. Now that I want to know why it appears that user X accessed the server (and when), it's likely WAY too late. Out of the box, my Unix login logs go back to the beginning of the prior month.

LOL! WHY would a server OS not track logins? LOL!



<div>
<div class="content wysiwyg-content">
I am running Win Server 2008. How to i find a log that will show who has logged into my server using Remote Desktop? 
</div>
</div>


I am running Win Server 2008. How to i find a log that will show who has logged into my server using Remote Desktop? 

Remote Desktop login history

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Remote access may refer to the connection to a data-processing system from a remote location, for example through a virtual private network remote desktop software, terminal emulation, or the activation of features of a business telephone system from outside the business's premises.