Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Logging Remote Desktop activities to the win2008R2 server

Posted on 2012-04-11
11
Medium Priority
?
619 Views
Last Modified: 2012-04-16
Dear,
How can I Log all Remote Desktop activities to the win2008R2 server?
Thx
0
Comment
Question by:hassanayoub85
  • 5
  • 4
  • 2
11 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832777
Auditing encompasses a lot of areas.

Here's what I configure on my servers:

Audit account logon events -> Success, Failure
Audit account management -> Success, Failure
Audit directory service access - Failure
Audit logon events -> Success, Failure
Audit object access -> Failure
Audit policy change -> Success
Audit privilege use -> Failure
Audit process tracking -> Not defined
Audit system events -> Success
0
 

Author Comment

by:hassanayoub85
ID: 37832864
Dear all,
All what I want is to know what IP addresses and MACs for the users logging in to mys erver remotely, and any other info can I achieve.
Thx
0
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832881
Well I'm not 100% you will be able to gather all information like MACS but you will get IP addresses

Another third-party tool http://www.terminalserviceslog.com/blog/index.php/2010/01/11/configuring-auditing-for-windows-servers/
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832891
The logs will provide you a hostname. You can get figure out the mac using getmac /s <hostname>.
0
 

Author Comment

by:hassanayoub85
ID: 37832947
Does Observe It Allow me to record the activities only when remote connection is running?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832954
No this records all types of events
0
 

Author Comment

by:hassanayoub85
ID: 37832966
I am searching for a tool which records only activities for the Remote connected users.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37833003
You can NOT just get Remote Desktop Events. There is no such thing as Remote Desktop Auditing you must turn on auditing which audits other Events.
0
 

Accepted Solution

by:
hassanayoub85 earned 0 total points
ID: 37833140
0
 

Author Closing Comment

by:hassanayoub85
ID: 37850316
found a faster solution.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question