• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 55
  • Last Modified:

Remote Desktop connection - find older log item

I'm running windows server 2008 r. Last august a person with administrative authority logged into the system by Remote Desktop, and did some damage. I can see the person's computer name in the windows event log. I'm trying to determine the iP address of that person.

when I examine the log in TerminalServices-RemoteconnectionManager, i see log records that ONLY go back abnout 10 days or so. Is there a history of older log files? where do I find them?
1 Solution
If you did not back the log then no older events are existing
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now