remote access logons in Event Viewer

Secure Home | Search | About

Lost Password?

Microsoft Applications Security - Microsoft's general security discussions and announcements

Bookmark this page: YahooMyWeb

Yahoo!

Google

Windows Live

del.icio.us digg

digg

Netscape

Subject

Author

Date

remote access logons in Event Viewer

James

07-28-2005

RE: remote access logons in Event Viewer

Won

07-28-2005

Posted by =?Utf-8?B?SmFtZXM=?= on July 28, 2005, 12:06 pm

If you were Registered and logged in, you could reply and use other advanced thread options

I need to find out if someone is logging on to our sever via remote access
desktop. Is there an Event Log entry to indicate access via RAD?

Posted by =?Utf-8?B?V29uZyBUdWNrIFdhaA== on July 28, 2005, 11:43 pm

If you were Registered and logged in, you could reply and use other advanced thread options

I suppose you are refering to Remote Desktop Connection, right?

Yes, on the PC that are being RDC-ed, in the security log there will be an
event ID 528. This event will show the user who logon and the client IP
address from the RDC-ing PC.

HTH.

Similar Threads	Posted
can't access remote registry + event viewer	September 7, 2005, 9:41 pm
Event viewer - access denied	July 12, 2005, 3:58 pm
VPN error 718 timeout while server event viewer grants user access	August 28, 2008, 11:54 pm
Remote access to event logs	August 12, 2005, 4:09 pm
Event viewer	July 29, 2007, 10:54 am
Locking down Event Viewer	October 20, 2005, 10:28 am
Event Viewer : Security	January 12, 2006, 11:52 am
Event Viewer - Security Log	September 5, 2007, 6:54 pm
Security Event viewer	May 28, 2009, 4:11 pm
Internet Explorer in event viewer	September 19, 2008, 5:30 am

The site map in XML format XML site map