Hi I am running Windows server 2008 R2 at work and we want to set up remote login. But the bosses aren't too keen on this idea. I was wondering if there is a log file somewhere that logs all the remote login attempts and where this file might be. This way they would be able to tell if anyone had accessed the data making them more likely to give us the go-ahead Thanks for any help.

Hi, From your description, I understand that you want find a method of auditing user login and logout in event logs. You can try to enable the policy "Audit logon events" and then we can audit the user logon/logoff events in the security log. To enable the policy "Audit logon events", please perform the following steps: 1. Logon Domain Controller using domain administrator. 2. Open default domain controller policy or create a new GPO at domain level. 3. Click Local Computer Policy, click Computer Configuration, and then click Windows Settings->Security Settings->Local Policies->Audit Policy->Double click Audit logon events and Audit Account Logon Events->Select Success and Failure. Click OK. More information: Audit logon events http://technet.microsoft.com/en-us/library/cc787567(WS.10).aspx Auditing Security Events Best practices http://technet.microsoft.com/en-us/library/cc778162(WS.10).aspxTechnology changes life

OK. Now how do I show the boss the events related to remote logins (successful and attempted)?