Remote Desktop User login tracking

Guys I need to go back and look at the login history of a user on an RDP server. I have tried going to "terminalservices-remoteconnectionmanager" and looking in the operational log. However, it was set to purge the log once it got to the 1024kb file size. Is there anywhere else I can go and look back at a users login history???
LVL 1
mikesmithccsOwner/OperatorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris HInfrastructure ManagerCommented:
Security log on the domain controller should contain logon/logoff attempts.
mikesmithccsOwner/OperatorAuthor Commented:
That works but only goes back about 2 weeks, any other ideas?
Tony GiangrecoCommented:
If you have a backup of the log, I'd restore it to a different folder so your current file is retained while allowing you to access the older log entries.

Do you have a backup?
Microsoft Azure 2017

Azure has a changed a lot since it was originally introduce by adding new services and features. Do you know everything you need to about Azure? This course will teach you about the Azure App Service, monitoring and application insights, DevOps, and Team Services.

mikesmithccsOwner/OperatorAuthor Commented:
I dont. This wasnt something we were monitoring and just now had a need to start. Just trying to see if windows might keep a log that goes back farther.
Tony GiangrecoCommented:
If it's already rolled off the Windows logs and you don't have a backup, the information has already been wiped out.

If the user connected by VPN and then connected by RDP, there may be a log in your firewall, but that's a long shot.

I suggest adding a daily or weekly backup to the server so you are prepared if this need comes up again.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mikesmithccsOwner/OperatorAuthor Commented:
Thanks for the help. Again, this wasnt something we thought we need to watch and just became an issue, I will implement these things going forward so we have a history.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.