1

I need to see only success/fail logs for Remote Desktop connection. I want to monitor who (what username), when (datetime) and where (ip address) tried to connect to my remote server.

How do I filter this in Event Log in MS Windows Server 2008 R2?

Thanks

Improve this question

1 Answer 1

Reset to default
1

Check first if logging is enabled. You can use Basic windows logging using the policy setting "Audit Logon Events". You can then filter for these events as described here: Link

If you need some more features (in the future) I recommend installing Secure RDP.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .