Tracking Terminal Services Logins

[Brian Rodeck]

How can I tell if/when a user has logged into Terminal Services? I would
like to distinguish Win2K login (say at their workstation) from remote
Terminal Services login.

I understand how to see "real time" that certain users are logged in, but I
would like to develop a report showing who logged into Terminal Services and
when.

TIA for your help!

 

[Vera Noest [MVP]]

If you enable auditing of security events, you will see all logon and
logoff events in the Security tab of the EventLog on the TS.

You can filter and export these events once a month to a tab-
delimited textfile for further processing.

Or you could make your own, very simple logon report by adding a line
to your TS-specific login script:

echo %username% %clientname% %date% %time% >> logon.log

195461 - How to Set Up a Logon Script Only for Terminal Server Users
http://support.microsoft.com/?kbid=195461