I want to know if RDP sessions (from the initiating PC) are noted in the event log, and if so, how they are indentified in the event log.

Hi BrownGR, Thanks for the post! To check the RDP event, you should enable the Audit logon events in Audit Policies. Open your Group Policy Editor, go to Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policies\Audit logon events Configure this group policy setting then you will find the logging events under Windows Logs - Security in Event Viewer. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.