keeping track who is in computer thru remote desktop 3

[obulldog27]

Is their a way to keep track of who is currently logged into a computer thru remote desktop. Sometimes at work when I try to log into a computer with xp pro thru remote desktop their is a windows saying that the computer is locked by another user. Sometime I end up kicking a user out. Is their a way to let the user know I am coming in or a way to track or log who has been in or is in the system.

 

[bcastner]

Other than IM or an email, no.

 

[linney]

a way to track or log who has been in"

Group Policy.
Local Computer Policy/ Computer Configuration/ Windows Settings/ Security Settings/ Local Policies/ Audit Policy

Audit policy. Determines whether security events are logged into the Security log on the computer. Also determines whether to log successful attempts, failed attempts or both. (The Security log is part of Event Viewer.)


This is the type of Information available -

Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 31/01/2005
Time: 12:29:44 PM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXX
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: XXXXXXXX
Source Workstation: XXXXXXXXXXXX
Error Code: 0x0

XXXX = Details of Computer logged on to, details of Source Workstation logging on from, and Account Name. Substitited to protect my innocence.


To obtain this logon Information you may find it easier to use the Filter options available under the View Menu of the Event Viewer with the Security folder open. The Event Source is Security and the Catagory is Account Logon.

 

[bcastner]

Linney's approach offers some possibilities I had not considered.

You might enjoy using this utility from Microsoft - Log Parser -

http://www.microsoft.com/downloads/...6b-abf8-4c25-91b2-f8d975cf8c07&DisplayLang=en

 

[obulldog27]

I will look in to both suggestions. Thanks for the help.

 

[Auger282]

I could be mistaken.. but bcas

isnt there a way to see who is currently logged in from within the computer management / sessions window?

but you would have to be logged in to see that via console or RD