Auditing Terminal Server failed logons

Question

We have an issue with a user being unable to log onto a terminal server. Where in the server's logs can I find the details of this? Been hunting through the various event logs and not managed to find anything useful.

Answer 1

Hi,

On the server side, you can check below event logs and focus on the logs at the issue time.

Event Viewer – Applications and Services Logs – Microsoft – Windows-remoteapp and desktop connections
Event Viewer – Applications and Services Logs – Microsoft – Windows – RemoteDesktopServices-****
Event Viewer – Applications and Services Logs – Microsoft – Windows - TerminalServices-LocalSessionManager
Event Viewer – Applications and Services Logs – Microsoft – Windows - TerminalServices-RemoteConnectionManager

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-r2-and-2008/ee890881(v=ws.10)

But, we suggest that you should share the error message you got when the user failed to log onto the terminal server, so that we can proceed further investigation.

Thnanks,
Eleven

----------

If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

Answer 2

link gave me an error