Saturday, July 4, 2015

Who Has Accessed My Computer Through Remote Desktop, Terminal Services or Remote Assistance

You could either use Windows Even Viewer, Event Log Explorer or My Event Viewer.

Windows event viewer : Go to Start, then type Event Viewer, double click on EventViewer.


In the left column, expand Windows Logs, then select Security.
Scroll down and look for an Event ID of 4624 and Logon Type ID of 10


Double click on an event to see the Logon Type.


To find the Wan IP address of the Remote computer, scroll down to Source Network Address.


Event Log Explorer : http://www.eventlogxp.com/
I found this neat program that displays the event log with a quick browse feature.


You can also create some Custom Columns : http://lozaelec.blogspot.com.au/2015/07/event-log-explorer-custom-columns.html
30Days Trial and free licence available or pay for a full licence


My Event Viewerhttp://www.nirsoft.net/utils/my_event_viewer.html




No comments: