2003 VPN Logs?

[zag]

Anyone know how to check who logged into a windows 2003 VPN connection?

 

I cant find the log files.

 

I'm also wondering if its possible to check if someone has remote desktoped to a PC, is there a log file for that anywhere?

 

Cheers

Edited June 20, 2008 by zag

[SYNACK]

VPN logs need to be configured but are quite easy to sort.

 

Just go into RRAS and expand the server name in the left hand column. Click on the Remote Access Logging folder then you have the options in the right hand column. You can set it up to log to a Local File and/or a SQL DB.

 

You will need to double click on either local file or sql to configure what events get logged. You can choose to log Authentication, Accounting and periodic status events.

 

The log files are stored in the C:\WINDOWS\system32\LogFiles folder by default but you can change that in the logging method properties.

 

Don't thing there is a way to log RDP access but you could set the computer up to audit logon events in group policy which would make it log who logged on interactively and when.