0

I am on a network from which any machine could do a remote desktop access to my Windows machine using the tool (remote desktop connection). I want to be able to spot when somebody accessed my machine using the mentioned tool.

Any idea where to look to find the history of access from such machines on the network?

Thanks

Improve this question
1
  • Remote Desktop sessions are by default disabled on a standard Windows image. Have you specifically enabled the ability on your user account? Please edit your question instead of submitting a comment
    – Ramhound
    Commented Oct 6, 2022 at 7:02

1 Answer 1

Reset to default
0

You can find the history in the Event Viewer.

You can open it with:
WIN+R and enter eventvwr

Please find logons under:
"Windows Logs > Security"

enter image description here

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .