Logon No IP Address in Event Log?

[BackCat3]

Hi Guys,

 

Is there any way to log the IP address of someone who uses remote desktop to connect to a server?

For some reason Event Log doesn't log the IP address? See below;

 

Event Type: Success Audit

Event Source: Security

Event Category: Logon/Logoff

Event ID: 538

Date: 13/08/2011

Time: 17:27:13

User: HOME\Administrator

Computer: HOME-SBS

Description:

User Logoff:

User Name: Administrator

Domain: HOME

Logon ID: (0x0,0x24CC70FD)

Logon Type: 10

 

 

For more information, see Help and Support Center at Events and Errors Message Center: Basic Search.

[EduTech]

I know that event log does generate a report of the IP Address for remote connections (Users WAN IP), But I imagine your referring to the local network IP./

 

James.