<div>
The TS article below will show you various methods to audit the RDP (and not only) login/logout sessions:<br />
<br />
<a href="https://social.technet.microsoft.com/Forums/windowsserver/en-US/78964658-9a04-4d2d-9506-b5516d9e4dfc/remote-desktop-reports-who-logged-in-and-logged-out-on-the-server-for-last-24-hours?forum=winserverTS" rel="ugc nofollow">https://social.technet.microsoft.com/Forums/windowsserver/en-US/78964658-9a04-4d2d-9506-b5516d9e4dfc/remote-desktop-reports-who-logged-in-and-logged-out-on-the-server-for-last-24-hours?forum=winserverTS</a><br />
<br />
<br />
And here is a sample powershell script of doing exactly what you need <a href="https://gallery.technet.microsoft.com/Remote-Desktop-Connection-3fe225cd" rel="ugc nofollow">https://gallery.technet.microsoft.com/Remote-Desktop-Connection-3fe225cd</a>
</div>


<div>
Hi Icohan,<br />
<br />
I saw that but not being familiar with PS I could not get it to work. &nbsp;Please help by briefly explaining the script.<br />
<br />
.\RDPConnectionParser.ps1 -ServersToQuery Server1, Server2 -StartTime &quot;November 1&quot;<br />
<br />
When I run it I get the message below so I must not understand PS enough.<br />
<br />
.\RDPConnectionParser.ps1 : The term '.\RDPConnectionParser.ps1<wbr />' is not recognized as the name of a cmdlet, function,<br />
script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is<br />
correct and try again.<br />
At line:1 char:1<br />
<br />
Thanks for your help.<br />
<br />
Bill
</div>


<div>
Also - Is server 1 the gateway or the RDP VM?
</div>


<div>
So you download and copy RDPConnectionParser.ps1 ON the Server where you want to get the report from;<br />
Start Powershell on that server and run the command below where of course you will need to updated the folder name where you put it, the &nbsp;server name and adjust the start date as needed: <br />
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;C:\WhateverFolder\RDPConne<wbr />ctionParse<wbr />r.ps1 -ServersToQuery YourServerNameHere -StartTime &quot;August 1, 2018&quot;<br />
This will create a CSV output on the desktop you run it from.<br />
<br />
You could aggregate all you want to do in a SSIS package to perform these steps using a parameter for the date and pull the CSV file into a SQL table.
</div>


<div>
Great help! &nbsp;I got it to run. &nbsp;Please explain the SSIS package concept as this would be perfect. &nbsp;I can open another question if you want.<br />
<br />
Thanks,<br />
<br />
Bill
</div>


Programmer

Bill Ross

<div>
Hi Icohan,<br />
<br />
Perfect! &nbsp;Do you know how to execute a PS script from TSQL?<br />
<br />
All is working great!<br />
<br />
Thanks,<br />
<br />
Bill
</div>


<div>
Here's a link to show you how to include powershell script in SSIS and how to grant the access needed for the task to not fail: <a href="https://blogs.msdn.microsoft.com/ssis/2017/01/26/run-powershell-scripts-in-ssis/" rel="ugc">https://blogs.msdn.microsoft.com/ssis/2017/01/26/run-powershell-scripts-in-ssis/</a>
</div>


<div>
All set. &nbsp;Thanks for the help!!!
</div>


<div>
Fast help! &nbsp;Thanks - saved my butt.
</div>


<div>
<div class="content wysiwyg-content">
I need a way top keep track of Remote Desktop login/logout and disconnected sessions by userid. &nbsp;I'm not familiar with PowerShell yet but I've seen some scripts that do that by exporting the &nbsp;TerminalServices-LocalSess<wbr />ionManager<wbr /> events. &nbsp;I'm struck though. &nbsp;I would like to put into a SQL DB so we can analyze who is using the RDS. &nbsp;We have 20+ RDS users.
</div>
</div>


I need a way top keep track of Remote Desktop login/logout and disconnected sessions by userid.  I'm not familiar with PowerShell yet but I've seen some scripts that do that by exporting the  TerminalServices-LocalSessionManager events.  I'm struck though.  I would like to put into a SQL DB so we can analyze who is using the RDS.  We have 20+ RDS users.

Need to keep track of RDS users

A desktop computer is a personal computer designed for use at a single location due to its size and power requirements, usually by one person. The most common configuration has a case that houses the power supply, motherboard, disk storage (usually one or more hard disk drives and optical disc drives); a keyboard and mouse for input; and computer monitor and printer for output. The case may be oriented horizontally and placed atop a desk or vertically and placed underneath or beside a desk.

Desktops

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.

Powershell

SQL (Structured Query Language) is designed to be used in conjunction with relational database products as of a means of working with sets of data. SQL consists of data definition, data manipulation, and procedural elements. Its scope includes data insert, query, update and delete, schema creation and modification, and data access control.