How to Log All Logon Attempts to a Remote Desktop

Microsoft Windows comes with a program called Remote Desktop that allows users to log in to a Windows system running Terminal Services and control the computer as though they were physically sitting at it. When a Remote Desktop client contacts a Terminal Services server, a log will be generated to describe the event. You will need to enable the Terminal Services Session Directory logging service to make this connection.

Things You'll Need

• Windows Server 2003

Instructions

1. Click "Start," "Administrative Tools," "Terminal Services Manager."

2. Click the "+" icon next to "Configuration."

3. Click "Events."

4. In the right-hand pane, select "ALL" under "Logging."

5. Click "Browse" and choose a location to save your log file in. Events will also be logged to the Windows Event Log.

References

• Microsoft: Windows Server 2003 Terminal Services
• WindowsNetworking.com: Windows 2003 Terminal Services
• Amaranth Consulting: IT Daily: Good Windows Security Practice of the Month