Hello,
Thank you for posting in Q&A forum.
To further troubleshoot this issue, please kindly try below steps:
1.Navigate to: Applications and Services Logs > Microsoft > Windows > TerminalServices-RemoteConnectionManager > Operational.
2.Filter logs by setting Event ID to 1149, which indicates a successful remote desktop authentication.
3.Afte that you will be able to export all log data displayed.
I hope the information above is helpful.
If you have any questions or concerns, please feel free to let us know.
Best regards,
Jill Zhou
If the Answer is helpful, please click "Accept Answer" and upvote it.