is launched from the RUN line, it would be stored in the registry as
well.
Klint
Steve Ens wrote:
I think there might be a listing in the registry as
well...can't seem to remember which key though.
On Mon, Jun 9, 2008 at 12:06 PM, James
Winzenz < [EMAIL PROTECTED]>
wrote:
RDP
question for everyone – is there a file on
the client (log or other file type) that shows a client's most recent
rdp
sessions? When I click on my remote desktop connection, it always
shows
me my the name of the last server I RDP'd into, but I am looking to see
if that is stored somewhere on the local computer. We had some
inappropriate
activity using a service account and don't yet have enough information
to
prove that a certain person did something they should not have. The
more
information I can obtain, the better. The client was XP Pro SP2, if
that
helps any. I have viewed the event logs on the server they logged
into,
and it unfortunately does not provide the computer name that connected
to it,
just the IP address. I want irrefutable proof, and this, in
combination
with the DHCP logs, does not quite provide that. I have been unable to
find anything yet in Google using multiple different search strings.
Thanks,
James Winzenz
Infrastructure
Systems
Engineer II - Security
Pulte Homes
Information Services
Telefax: (602)
797-5823
CONFIDENTIALITY NOTICE: This email may contain confidential and
privileged material for the sole use of the intended recipient(s). Any
review, use, distribution or disclosure by others is strictly
prohibited. If you have received this communication in error, please
notify the sender immediately by email and delete the message and any
file attachments from your computer. Thank you.
|
