Setup auditing on a terminal server

346430 pts.
Tags:
IP Address Authentication
Network Monitor
Network monitoring
Terminal Monitor Program
Terminal Server
How can I setup auditing on a terminal server to list all long in attempts and from what IP address they originated? We have a time sheet server and want to make sure where the users are logging in from.

Answer Wiki

Thanks. We'll let you know when a new response is added.

I would do the following things:

1) Setup & Configure a syslog server
2) Create a new GPO via Group Policy Management with these settings:
Computer Configuration -> Policies -> Window Settings -> Security Settings -> Local Policies -> Audit Policy
a) Enable “audit logon events” with success and if you want failure
3) Create a new OU called “Terminal Servers”
4) Move your Terminal Server to this OU
5) Assign this new GPO to this OU
6) Configure the syslog server to retrieve the logs from this terminal server
7) Now utilizing the syslog server’s gui (fat client or browser), you should now see events.

Free Syslog Server: http://www.solarwinds.com/products/freetools/kiwi_syslog_server/

Discuss This Question:  

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following