How to find out who comes in via RDP?

S

Shamil2015-07-02 20:15:38

System administration

Shamil, 2015-07-02 20:15:38

There are several offices with dedicated ip addresses, which are interconnected by mikrotik tunnels.
On Mikrotik, port forwarding was done so that there was access from the outside to the servers.
Is it possible to somehow get a list of who, when and from what address connected to servers from the outside?

Reply

Answer the question

In order to leave comments, you need to log in

5 answer(s)

M

Maksim Zverev, 2015-07-02
@m1skam

Right click on "My Computer" - Management - Utilities - Windows Logs - Microsoft - Windows - TerminalServices - LocalSessionManager

N

nApoBo3, 2015-07-03
@nApoBo3

1 enable log on Mikrotik
2 Windows log

C

Cool Admin, 2015-07-02
@ifaustrue

Enable logging in the rules.

V

Victor Ganeles, 2015-07-09
@Ghool

It is done in parts:
1) who - enable auditing on computers, where logon-logoff scripts are connected or easier (there was a question on the toaster)
2) from where - connection logs in Mikrotik.

A

Anton, 2015-07-02
@Largo1

you can find out ..
but some kind of strange statement of the question ..)
do you have anarchy there or what?
it is not known who can enter, but who actually enters?