We have some Windows 2008 servers that multiple departments have RDP access to.
I would like to view who has been logging into these servers by using the Security logs.
Could someone tell me
i. What event id/ event id's I should be looking for in the Sec logs
ii. Is there anyway to find out the IPs that these accounts are logging in from