0
We have server where only one worker is connecting using remote desktop.
I want to check how long did each session last.
Found out that in event viewer through ID 4624 I can filter all logins, but cant see logouts. (or time for each session).
Azz Kawa
Posted 2017-06-27T09:11:34.357
Reputation: 109
Did you dig a little deeper into the Windows Security logs to see the "logoff" entries? Additionally, did the user log off, or did they simply close their session and re-connect to it later (this isn't a logoff)? – Kinnectus – 2017-06-27T09:18:19.813
User simply closes his session (disconects through remote desktop), never "logoff". – Azz Kawa – 2017-06-27T09:58:51.550