Remote Desktop security or logs?

[stultus]

Pretty simple question -- I use remote desktop. How do I see what IPs or clients are conencting, or are trying to gain access but failing. Are there such logs in Windows?

 

[talyn00]

You can try enabling security audits of logon events. You can change it in either the Group Policy Editor( Start Menu -> Run -> gpedit.msc ) or Local Security Settings (Control Panel -> Administrative Tools -> Local Security Policy). That should provide logs of login attempts. You can check the logs under the Event Viewer. You could also setup your firewall to keep track of activity on port 3389 to log IP addresses.

This site was pretty useful for setting up Remote Desktop