Anyone know how to check who logged into a windows 2003 VPN connection?
I cant find the log files.
I'm also wondering if its possible to check if someone has remote desktoped to a PC, is there a log file for that anywhere?
Last edited by zag; 20th June 2008 at 09:56 AM.
VPN logs need to be configured but are quite easy to sort.
Just go into RRAS and expand the server name in the left hand column. Click on the Remote Access Logging folder then you have the options in the right hand column. You can set it up to log to a Local File and/or a SQL DB.
You will need to double click on either local file or sql to configure what events get logged. You can choose to log Authentication, Accounting and periodic status events.
The log files are stored in the C:\WINDOWS\system32\LogFiles folder by default but you can change that in the logging method properties.
Don't thing there is a way to log RDP access but you could set the computer up to audit logon events in group policy which would make it log who logged on interactively and when.
There are currently 1 users browsing this thread. (0 members and 1 guests)