Hi guys,

Is it possible for me to get a client's ip address who has been recently logging into the remote desktop service (rd server)?

Can you tell where the logs are saved containing the internet ip address of that client?

Its urgent!!!

Hiya, 

It depends on what you have enabled, which options are available:

1: http://technet.microsoft.com/en-us/library/cc772447.aspx

2: Event viewer -> Applications and Services Logs\Microsoft\Windows\TerminalServices-LocalSessionManager

3: If GPO with Enable "Audit Logon Events" is set.

They might give you what your looking for.

Hi,

Please check if the following script is helpful.
http://gallery.technet.microsoft.com/scriptcenter/e8c3af96-db10-45b0-88e3-328f087a8700

When you import the module you should be able to get the client ip address using the code below or something equivalent.

$id = get-rdsession | where {$_.user -eq $env:USERNAME} | foreach {$_.SessionID}

$ipAddress = get-rdsessionstatus -sessionid $Id | foreach {$_.ClientAddress}