|
Re: Remote desktop logs
"Ammad Shah" <AmmadShah@discussions.microsoft.com> wrote in message
news:CD4D8FA2-668C-4D97-BEBB-EBA1FD73FE63@microsoft.com...
> Hi,
>
> I would like to ask a question, who did RDP to my Windows xp last time?
> my system is in domain (Windows 2003), and some one Remote destop to my
> system and deleted several files. currently auditing is not configured.
>
> thanks
If there are any records about RDP sessions on your machine then you would
find them in the Event Logger (eventvwr.exe).
|