Can this be considered RDP authorization?

V

valkiry2020-02-20 10:32:23

RDP

valkiry, 2020-02-20 10:32:23

Can this be considered RDP authorization?
* Background. Bought a dedicated server. How can I check that the administration of the resource on which I bought is not roaming around my server? WIndows 10 x64
So far, the only option is Event Manager. Here above in the picture I found an authorization that I did not do. It's just strange that the logs were not erased after themselves

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

H

hint000, 2020-02-20
@hint000

Look for event 1149 here: Event Viewer -- Applications and Services Logs -- Microsoft -- Windows -- TerminalServices-RemoteConnectionManager -- Operational
If there is, this is it, you will see the ip address there.

V

VyachH, 2020-02-20
@VyachH

Change all passwords) and in the firewall set the IP from which the RDP connection is allowed.
I advise you to add at least 1 backup in case the first one becomes unavailable in case of a change of provider, etc.

C

CityCat4, 2020-02-21
@CityCat4

Administrations you nafig not dug, directly on your wheelbarrow to rummage around, if they need to - they tend to it and rummage around the clone.