Solved

Remote Desktop Session history

Posted on 2013-11-21
4
484 Views
Last Modified: 2013-12-03
I have a farm of remote access servers for my user population and I need to create a historical report of usage. Is there a way to retrieve historical data from Windows 2008r2 that will show who has been connecting through the remote desktop session on these servers?
0
Comment
Question by:jfholloway
  • 2
4 Comments
 
LVL 77

Accepted Solution

by:
arnold earned 250 total points
ID: 39668061
You can get login data from the security log on the DC and the system depending on the size of the log.

For future use, you should setup a RDP user GPOS that runs a login/logout script recording it in a file or in a database.

Using snmp with evntwin you can map a event log event to an snmptrap that will be sent to an smtp trap server.  Setting up event log forwarders to a central event collector, you can then use splunk to collect/search/report on these events.
0
 
LVL 24

Expert Comment

by:Lionel MM
ID: 39671402
This guy wrote a little script that does some of what you are looking for.
0
 

Author Comment

by:jfholloway
ID: 39674862
thanks for the comments. Lionelmm where can I find the script you are referring to?
0
 
LVL 24

Assisted Solution

by:Lionel MM
Lionel MM earned 250 total points
ID: 39677468
I am so sorry I can't find it. It was a batch script. So spent quite some time trying to find it again, using my history with no luck. So did a search and came across this one. Will keep looking because the other one because I want to use it myself. My apologies. http://gallery.technet.microsoft.com/scriptcenter/6a6a6b50-577b-49fd-9432-aa679e41361c. This is not historical so I suggest you run it on scheduled basis and create reports each time it runs--thereby the reports become your historical data.
0

Featured Post

Courses: Start Training Online With Pros, Today

Brush up on the basics or master the advanced techniques required to earn essential industry certifications, with Courses. Enroll in a course and start learning today. Training topics range from Android App Dev to the Xen Virtualization Platform.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question