Avatar of Enhance Technology
Enhance TechnologyFlag for India

asked on 

How to find who used my machine via Remote Desktop Cntn in win 7

Hello,
I need to know , how to find the person's IP address who used my machine via remote desktop connection in windows 7. I am annoyed by this repeat access and i couldn't find who is making use of my system. When they access it the person closes all the window's that are active. I haven't done anything to anyone like this and its disturbing me a lot. Kindly let me know if there are any ways to find it out.
Remote AccessWindows OSWindows 7Desktops

Avatar of undefined
Last Comment
Hello There
Avatar of Lee W, MVP
Lee W, MVP
Flag of United States of America image

There is no way to find out UNLESS you already have 3rd party logging software installed to tell you.  Windows doesn't track what IP accesses it by default.

If they are closing your Windows, then they have your password - CHANGE YOUR PASSWORD.

If they don't have your password then they are not connecting via RDP but rather through some third party remote control software - in which case, disable or uninstall the third party software or check the third party software logs.

When you connect via RDP it doesn't take over whoever is logged in - it "switches users" and leaves everything you have as is.  If it's changing then someone else has your password or they are not connecting with RDP.
ASKER CERTIFIED SOLUTION
Avatar of Adam Brown
Adam Brown
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of Hello There
Hello There

If you are in a domain, admin may sometimes do some work on your PC. You won't be able to do anything about it.

If you are not in a domain:
1. In case you are logged off when someone connects to you (he/she is using RDP), change your password.
1. In case that you can see what actions someone does, uninstall all third party software related to remote access like TeamViewer, VNC, LogMeIn etc.
Avatar of Vikas Bhat
Vikas Bhat

You should normally find a logon event in security log. see attached
RDP.jpg
Avatar of Enhance Technology

ASKER

Is there any kind of way to checking IP wise log, all systems having same user name & password and we couldn't change password.
Avatar of Hello There
Hello There

If everybody uses the same credentials, you cannot find the person (by the name) who is causing this.

BTW Are you in a domain? Have you tried to discuss your problem with your administrator?

How do this person log on to your PC (RDP or third party software)?

Do you have rights to change any settings on PC?
Windows OS
Windows OS

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo