Does RDP log connection attempts?

N

NEODARK

Gawd
Joined
Aug 10, 2004
Messages
1,002
What the title says...

Anyone knows if RPD (WInXP Pro SP2) logs connections attempts to it? Like how many times someone has connected, or tried to, but failed... etc? (kind of like the ftp logs you get?)

thanks :D
 
If you are doing security auditing, the attempt would show up in the security log as a failed log on attempt. It would be a failed interactive log on (Type 2).

But, this is not enabled by default. So, yes it can log them, but you must configure it to do so.
 
cool, thanks.

I have no idea where to start (other than the MMC and the event viewer) Is there anything specific that I should be looking at? :D

tnx again.
 
Click Start > Run > GPEdit.ms

Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy

Enabled Success and Failure auditing on Account Logon Events and Logon Events

You can review what is log in the Even Viewer in the Administrative tools under Security. Look for an audit of Logon for Type 2 (Interactive Logon).
 
You must log in or register to reply here.
Back
Top