N
N
noname_shaman2015-06-29 18:13:55
System administration
noname_shaman, 2015-06-29 18:13:55

How to log RDP connections?

Good afternoon, there are about 25 remote servers (w2k3, w2k8), technical support specialists connect to them daily. It is necessary to set up logging of their connections, a method must be invented so as not to particularly load servers that are already dying. Approximate content of the log:
1) the beginning of the session;
2) IP address;
3) the end of the session.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
O
oia, 2015-06-29
@oia

so it is in the security log, or turn on audit successful login

S
Sergey Kovalev, 2015-06-29
@Sergey-S-Kovalev

In the context of the fact that Windows Server 2003 does not support scripting when an event occurs in the EventLog,
I can recommend a banal entry and exit script that writes to a text file on a network drive:
set F=%date:~6.4%-%date: ~3.2%-%date:~0.2%_%time:~0.2%-%time:~3.2%-%time:~6.2%
echo log on %f% %username% %computername% >>\\server\share\audit\"%username% %computername%.txt"
for the exit script everything is the same, except for replacing log on with log off
But there are problems with fixing the IP address from which they connect to the terminal server won't solve.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question