Solved

Logging Remote Desktop activities to the win2008R2 server

Posted on 2012-04-11
11
615 Views
Last Modified: 2012-04-16
Dear,
How can I Log all Remote Desktop activities to the win2008R2 server?
Thx
0
Comment
Question by:hassanayoub85
  • 5
  • 4
  • 2
11 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832777
Auditing encompasses a lot of areas.

Here's what I configure on my servers:

Audit account logon events -> Success, Failure
Audit account management -> Success, Failure
Audit directory service access - Failure
Audit logon events -> Success, Failure
Audit object access -> Failure
Audit policy change -> Success
Audit privilege use -> Failure
Audit process tracking -> Not defined
Audit system events -> Success
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832791
0
 

Author Comment

by:hassanayoub85
ID: 37832864
Dear all,
All what I want is to know what IP addresses and MACs for the users logging in to mys erver remotely, and any other info can I achieve.
Thx
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832881
Well I'm not 100% you will be able to gather all information like MACS but you will get IP addresses

Another third-party tool http://www.terminalserviceslog.com/blog/index.php/2010/01/11/configuring-auditing-for-windows-servers/
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832891
The logs will provide you a hostname. You can get figure out the mac using getmac /s <hostname>.
0
 

Author Comment

by:hassanayoub85
ID: 37832947
Does Observe It Allow me to record the activities only when remote connection is running?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832954
No this records all types of events
0
 

Author Comment

by:hassanayoub85
ID: 37832966
I am searching for a tool which records only activities for the Remote connected users.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37833003
You can NOT just get Remote Desktop Events. There is no such thing as Remote Desktop Auditing you must turn on auditing which audits other Events.
0
 

Accepted Solution

by:
hassanayoub85 earned 0 total points
ID: 37833140
0
 

Author Closing Comment

by:hassanayoub85
ID: 37850316
found a faster solution.
0

Featured Post

Backup Solution for AWS

Read about how CloudBerry Backup fully integrates your backups with Amazon S3 and Amazon Glacier to provide military-grade encryption and dramatically cut storage costs on any platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Using MS Hello on a Domain Joined Surface Book 4 51
Migrating Roaming Profiles to new server 5 48
SpaceMonger Issue 4 34
RDS profile settings with Framework 12 38
Local Printing Using Remote Desktop Windows 7 sometimes has issues with printing to a local printer using a Remote Desktop Connection (RDC). The 1st step is to verify that printers are checked on the Local Resources tab of the Remote Desktop C…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question