Connect logging (file or event log)

[Brad Smith]

Is there a way to find out when clients connect, idle, disconnect, etc?

I would have thought there would either be some type of file logging (like
IIS) or some type of event log auditing but I haven't been able to find it.

We are trying to do some type of analysis of user activity (by type) and the
logon/logoff event aren't providing enough granularity (it's Windows 2003
TS).

Thanks

 

[Guest]

Don't know if you are still looking at this thread, but I'm willing to bet
you could setup an automated script that could dump all the users and their
respective idle/active states to a text file for parsing later.

All you'd need to do is query all the terminal servers, get the info, and
dump it to a text file.

Something like running qappsrv to get a list of all your terminal servers,
parsing the output, and querying each server using qwinsta. Qwinsta will
output the user's names and their state as well as their idle counts. Just
dump all that data into a text file and set the script to append to that text
file every time the script is run. You could schedule the script to run
every 5 minutes or something like that.

-M