How to Log All Connections to Remote Desktop in Server 2003

By Bennett Gavrish

Administrators can track Remote Desktop activity through an Event Viewer log.
i preparing the file image by Pix by Marti from

With the Windows Server 2003 operating system, clients can establish two concurrent Remote Desktop sessions. As a system administrator, you have the option to track who logs in to your server through Remote Desktop by creating an audit policy. Then you can view the log of Remote Desktop activity through the Event Viewer tool. Only individuals with administrator privileges will have access to the Remote Desktop log.

Step 1

Log in to your PC server with an administrator account.

Step 2

Open the Start menu, go into the "Administrative Tools" section and click "Local Security Policy."

Step 3

Expand the "Local Policies" folder and highlight "Audit Policy."

Step 4

Double-click the item labeled "Audit logon events."

Step 5

Go to the "Local Security Setting" tab at the top of the window.

Step 6

Check the boxes next to "Success" and "Failure."

Step 7

Press the "OK" button to save the settings. Now all Remote Desktop connections will be logged and can be accessed through the Event Viewer.