Solved

Logging Remote Desktop activities to the win2008R2 server

Posted on 2012-04-11
11
616 Views
Last Modified: 2012-04-16
Dear,
How can I Log all Remote Desktop activities to the win2008R2 server?
Thx
0
Comment
Question by:hassanayoub85
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
11 Comments
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832777
Auditing encompasses a lot of areas.

Here's what I configure on my servers:

Audit account logon events -> Success, Failure
Audit account management -> Success, Failure
Audit directory service access - Failure
Audit logon events -> Success, Failure
Audit object access -> Failure
Audit policy change -> Success
Audit privilege use -> Failure
Audit process tracking -> Not defined
Audit system events -> Success
0
 

Author Comment

by:hassanayoub85
ID: 37832864
Dear all,
All what I want is to know what IP addresses and MACs for the users logging in to mys erver remotely, and any other info can I achieve.
Thx
0
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832881
Well I'm not 100% you will be able to gather all information like MACS but you will get IP addresses

Another third-party tool http://www.terminalserviceslog.com/blog/index.php/2010/01/11/configuring-auditing-for-windows-servers/
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37832891
The logs will provide you a hostname. You can get figure out the mac using getmac /s <hostname>.
0
 

Author Comment

by:hassanayoub85
ID: 37832947
Does Observe It Allow me to record the activities only when remote connection is running?
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37832954
No this records all types of events
0
 

Author Comment

by:hassanayoub85
ID: 37832966
I am searching for a tool which records only activities for the Remote connected users.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 37833003
You can NOT just get Remote Desktop Events. There is no such thing as Remote Desktop Auditing you must turn on auditing which audits other Events.
0
 

Accepted Solution

by:
hassanayoub85 earned 0 total points
ID: 37833140
0
 

Author Closing Comment

by:hassanayoub85
ID: 37850316
found a faster solution.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I'll explain how to setup a Plex Media Server (https://plex.tv/) on a Redhat (Centos) 7 based NAS with screenshots to help those looking for assistance.  What is Plex? If you aren't familiar with Plex, it’s a DLNA media serv…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

691 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question