I would like to monitor the users who is logging into the Win 2008 machines through RDP. Is there any log available?Thanks++ Madan

Following article should help How to turn on the Terminal Services Session Directory logging service http://support.microsoft.com/kb/327508 The Terminal Services Session directory log file contains the following entries: Session Directory service started Session Directory service stopped Machine joins session directory Machine leaves session directory User logs in User disconnects User reconnects User logs out Session Directory-related event log messages. If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !! This posting is provided "AS IS" with no warranties or guarantees and confers no rights. About Me !!!

I didnt find the Terminal Services Session Directory logging service MadanThanks++ Madan

Above mentioned article is for Terminal Servers. You won't find TS Session Directory Logging Service on non TS as far as I know. check following article for event IDs Remote Desktop Services Events in Windows Server 2008 R2 http://technet.microsoft.com/en-us/library/ff404148(v=ws.10).aspx Thanks !

I didnt find the Terminal Services Session Directory logging service Madan Thanks++ Madan I was referring to TS environment. Sorry, I wasnt clear in my response. If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !! This posting is provided "AS IS" with no warranties or guarantees and confers no rights. About Me !!!

Based on your description, I think you can enable the audit logon policy on the workstations. Then you can find the related events in Security Event log. Refer to: Audit Logon events http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx Regards, Miya Miya Yao TechNet Community Support

Based on your description, I think you can enable the audit logon policy on the workstations. Then you can find the related events in Security Event log. Refer to: Audit Logon events http://technet.microsoft.com/en-us/library/cc787567(v=ws.10).aspx Regards, Miya Miya Yao TechNet Community Support