Tracking IP Addresses

[mario]

Archived from groups: microsoft.public.windowsnt.terminalserver.misc (More info?)

We would like to track all the attempted logins on out Terminal server.
Whether they are successful or not. Basically we need to know if someone is
trying to hack in.

we are using Windows 2003 and Windows 2000 Terminal Services

 

[Guest]

Archived from groups: microsoft.public.windowsnt.terminalserver.misc (More info?)

If you enable auditing of security events, you will see all logon and
logoff events in the Security tab of the EventLog on the TS.

You can filter and export these events once a month to a tab-
delimited textfile for further processing.

Or you could make your own, very simple logon report by adding a line
to your TS-specific login script:

echo %username% %clientname% %date% %time% >> logon.log

--
Vera Noest
MCSE,CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
*----------- Please reply in newsgroup -------------*

"Mario" <mario@mario.net> wrote on 28 apr 2005:

> We would like to track all the attempted logins on out Terminal
> server. Whether they are successful or not. Basically we need to
> know if someone is trying to hack in.
>
> we are using Windows 2003 and Windows 2000 Terminal Services