View Single Post
  #9  
Old December 10th 09, 09:13 PM posted to microsoft.public.windowsxp.security_admin
JuliusPIV
external usenet poster
 
Posts: 9
Default Remote Desktop- Any logging?

I don't see one either - what is the problem specifically?

Taking a guess based on the Subject, check the Windows XP Security Event
Viewer Log. An Audit Policy may be configured using the Group Policy editor
to track logon success and failures:
From the Start | Run command window type gpedit.msc.
Navigate to Local Computer Policy | Computer Configuration | Windows
Settings | Security Settings | Local Policies | Audit Policy | Audit logon
events.
Highlight and right-click and select properties.
Configure as desired.

Note that logging in without a password is logged as a failure. This results
in the security log filling up very fast if you log failures and have a user
without a password. The result is you can not login normally. Also note, not
having a password is a potential and probable security risk.

The event log can be viewed by going to Start | Control Panel | Performance
and Maintenance | Administrative Tools and click on Event Viewer.

The Event Log (Security) noting a successful logon and logoff by a remote
user. The user can highlight a log entry and right-click to view the event
Properties for detailed information.

Look in the Security Event Log for a Logon/Logoff Event 528 and Logon Type
10.

The free Microsoft Port Reporter tool provides for additional logging.
Description of the Port Reporter Parser (PR-Parser) tool
http://support.microsoft.com/default...b;en-us;884289

Availability and description of the Port Reporter tool
http://support.microsoft.com/kb/837243

--
Julius G. Perkins, IV
Enterprise Systems
Workstation Architect
Ads