Is there any way to log the IP address of someone who uses remote desktop to connect to a server?
For some reason Event Log doesn't log the IP address? See below;
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
User Name: Administrator
Logon ID: (0x0,0x24CC70FD)
Logon Type: 10
For more information, see Help and Support Center at Events and Errors Message Center: Basic Search.
I know that event log does generate a report of the IP Address for remote connections (Users WAN IP), But I imagine your referring to the local network IP./
There are currently 1 users browsing this thread. (0 members and 1 guests)