Windows RDP Auditing and Reporting for Logon Time and Last Logon

How can i check a windows computer to see a list of all remote desktop sessions by users, when they last logged on, how long they logged on for?
GR JNAsked:
Who is Participating?
Peter SarabyConnect With a Mentor Senior IT ProCommented:
There are two general approaches, you can either write a script (e.g. Powershell) to query the event log to get that information, or you can use software for that. A log consolidation product probably won't be enough though, since it's difficult to get that information by just parsing logs.

I know that EventSentry can do that, it has a "Logon" or "Console Logon" report that tells you exactly when somebody logged on, from where and how long. Also gives other details such as whether they're an admin. Not sure if it's overkill for you though, it does significantly more than just logons.
PberSolutions ArchitectCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Peter Saraby (https:#a42429571)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.