Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is there a log or some other way to tell who has remoted in to my (xp) machine?

share|improve this question

migrated from stackoverflow.com Apr 13 '10 at 14:32

This question came from our site for professional and enthusiast programmers.

2 Answers 2

To see current connections:

  • open "Users" tab in Task Manager
  • or use qwinsta on command line.

To register all connections (logins) to the Event Log, enable Account login auditing in secpol.msc.

share|improve this answer

There is a codeplex project for Remote Access Monitor - you can use it to detect logins. If you aren't interested in the "monitor" side of things, you could rip out the code examples and use it to log to a file instead.

http://remoteaccessmonitor.codeplex.com/

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.