Remote Desktop - Session Logs - Windows
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is the latest version.

1Remote Desktop - Session Logs - Windows5/13/2016 8:21:45 AM
2Remote Desktop - Session Logs - Windows2/24/2017 2:01:40 PM

Description

Provides information about previous remote desktop sessions on the system.

NOTE: Due to issues with how BigFix parses the event log: https://forum.bigfix.com/t/the-event-record-inspector-is-returning-an-error-for-the-description-of-the-event/17006 this will NOT return results for users resuming their RDP sessions. This will only return results for users starting brand new user sessions over RDP.

For general information or to report issues with C3 Remote Control content please visit GitHub here: https://github.com/strawgate/C3-Remote-Control


Property Details

ID2998527
TitleRemote Desktop - Session Logs - Windows
DomainBESC
Added by on 2/24/2017 2:01:40 PM
Last Modified by on 2/24/2017 2:01:40 PM
Counters 1607 Views / 35 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Remote Desktop - Incoming Sessions - Windows
Period 6 hours
 
  * Results in a true/false
Show indented relevance
(preceding text of first "%0d%0a" of following text of first "User: " of description of it | "Unknown", time generated of it, (if (it = 21) then ("New Session") else ("Resumed Session")) of (event id of it), following text of last ": " of description of it) of records ((integers in(item 0 of it + item 1 of it - 1,maximum of (item 0 of it + item 1 of it - 2000;item 1 of it))) of (record count of it, oldest record number of it)) whose (exists description of it and (event id of it = 21 or event id of it = 25) and description of it does not contain "LOCAL") of event log "Microsoft-Windows-TerminalServices-LocalSessionManager/Operational"

Relevance

isWindows (Relevance 1172)
Used in 1113 fixlets and 524 analyses   * Results in a true/false
Show indented relevance
windows of operating system

Sharing

Social Media:
Share this page on Yammer

Comments