Checking RDP logs

C, Meegha 0 Reputation points
2024-11-07T19:27:35.56+00:00

After connecting to VPN, We do RDP into the VMs but every one uses the same credentials to login into those VMs and not individual user credentials. Is there a way i could find out who logged into the VMs and the time frame they were in there

Remote Desktop
Remote Desktop
A Microsoft app that connects remotely to computers and to virtual apps and desktops.
4,608 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Karlie Weng 18,581 Reputation points Microsoft Vendor
    2024-11-08T07:57:49.9366667+00:00

    Hello,

    If everyone logs in with the same credentials, we cannot distinguish the end user. However, you can find when they logged in from the event log:

    Look under Windows Logs > Security for Event ID 4624 (logon) and 4634 (logoff). This will show you the logon and logoff times along with the user details.

    You can also enable auditing policies on your VMs to log detailed information about user activities. This can help you track who accessed the VMs and their activities during the session.

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.