?
Solved

Logging Remote Desktop activities to the win2008R2 server

Posted on 2012-04-11
11
Medium Priority
?
617 Views
Last Modified: 2012-04-16
Dear,
How can I Log all Remote Desktop activities to the win2008R2 server?
Thx
0
Comment
Question by:hassanayoub85
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
11 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832777
Auditing encompasses a lot of areas.

Here's what I configure on my servers:

Audit account logon events -> Success, Failure
Audit account management -> Success, Failure
Audit directory service access - Failure
Audit logon events -> Success, Failure
Audit object access -> Failure
Audit policy change -> Success
Audit privilege use -> Failure
Audit process tracking -> Not defined
Audit system events -> Success
0
 

Author Comment

by:hassanayoub85
ID: 37832864
Dear all,
All what I want is to know what IP addresses and MACs for the users logging in to mys erver remotely, and any other info can I achieve.
Thx
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832881
Well I'm not 100% you will be able to gather all information like MACS but you will get IP addresses

Another third-party tool http://www.terminalserviceslog.com/blog/index.php/2010/01/11/configuring-auditing-for-windows-servers/
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832891
The logs will provide you a hostname. You can get figure out the mac using getmac /s <hostname>.
0
 

Author Comment

by:hassanayoub85
ID: 37832947
Does Observe It Allow me to record the activities only when remote connection is running?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832954
No this records all types of events
0
 

Author Comment

by:hassanayoub85
ID: 37832966
I am searching for a tool which records only activities for the Remote connected users.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37833003
You can NOT just get Remote Desktop Events. There is no such thing as Remote Desktop Auditing you must turn on auditing which audits other Events.
0
 

Accepted Solution

by:
hassanayoub85 earned 0 total points
ID: 37833140
0
 

Author Closing Comment

by:hassanayoub85
ID: 37850316
found a faster solution.
0

Featured Post

10 Questions to Ask when Buying Backup Software

Choosing the right backup solution for your organization can be a daunting task. To make the selection process easier, ask solution providers these 10 key questions.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question