I am a software developer and while I was working on some code I believe someone may have accessed my computer via Dameware, either on accident or purposefully, and ended up deleting some code. I am wondering if it is possible to see who had logged on to the computer during this time, or if there is a log of Dameware activity stored on my computer somewhere?


You can find this in the Windows System Logs -- Computer Management / Event Viewer / Windows Logs / Application

Look for Event ID 111 (Source:dwmrcs)

When you look at the details of the event you will see the Computer & User Name of the person that connected.

enter image description here


Diagnostics tool for DRS/MRC consoles is called Remote Support Diagnostic. It can be found in the Windows menu.

Click Start > All Programs \Solarwinds\DameWare Remote Support\Help\Support Tools > Remote Support Diagnostics

After executing it, just click Start and it will collect all logs and pack them into .zip file.

  • What if I do not have the particular folder? I am not seeing Solarwinds or DameWare in my program files. – PhoenixFly Sep 30 '16 at 16:08
  • @PhoenixFly what rdp client is being used then? – Mr. Hargrove Sep 30 '16 at 16:09
  • It is DameWare that is being used, but I am assuming the specific program file is being stored elsewhere? Is that possible? – PhoenixFly Sep 30 '16 at 16:13
  • @PhoenixFly have you checked your program files? And if applicable program files (x86). – Mr. Hargrove Sep 30 '16 at 16:14

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.