Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a log or some other way to tell who has remoted in to my (xp) machine?

share|improve this question

migrated from Apr 13 '10 at 14:32

This question came from our site for professional and enthusiast programmers.

To see current connections:

  • open "Users" tab in Task Manager
  • or use qwinsta on command line.

To register all connections (logins) to the Event Log, enable Account login auditing in secpol.msc.

share|improve this answer

There is a codeplex project for Remote Access Monitor - you can use it to detect logins. If you aren't interested in the "monitor" side of things, you could rip out the code examples and use it to log to a file instead.

share|improve this answer

You must log in to answer this question.