terminal services log

[mb]

Hi!
Do anyone knows how I can review when and from which PC
a user make a terminal server session to a server W2K?
Thanks

 

[Steven L Umbach]

Enable auditing of logon events on the TS and look in the security log in Event
Viewer for type 2 or type 10 logons. TS logons are not considered type three network
logons. From what I can tell in W2K, the logon events will not show which computer a
user logged on from. I am not sure if type 10 logon does or not which would be
generated on a XP Pro/Windows 2003 computer. --- Steve

http://www.microsoft.com/resources/...wsserv/2003/datacenter/proddocs/en-us/518.asp

http://www.winnetmag.com/WindowsSecurity/Article/ArticleID/38109/38109.html