How to audit RDP logon history (who logged in and when)
For a security review or an incident, you need to know who used a Remote Desktop host and for how long. This guide shows how to reconstruct logon history from the event log and export a report.
Tips & How To's tagged “remote desktop”
Step-by-step guides to help you get the most out of LizardSystems software.
- Step by stepClear, numbered instructions
- Quick readsA few minutes each
- Practical tipsGet more from each tool
- Organized by topicFilter by product and tag
How to detect an RDP brute-force attack from failed logons
A run of failed Remote Desktop sign-ins is often the first sign of a brute-force attack. This guide shows how to read event 4625 in the Security log and how to spot the pattern across servers.
How to reboot a terminal server without losing user data
Rebooting an RDS host with people still working loses unsaved data and generates tickets. This guide covers the safe sequence: warn, drain, clear, restart, on one server or several at once.
How to send a message to all Remote Desktop users
Before you patch or reboot, the users on a Remote Desktop host need warning. This guide covers the msg command for one server and broadcasting to many servers at once with reusable presets.
How to shadow a Remote Desktop user's session
Shadowing lets you watch or take control of a user's live Remote Desktop session for support. This guide covers mstsc /shadow and how to do it across many servers, including without making the help desk admins.
How to find which user is using high CPU on an RDS host
The terminal server is at 100% CPU and everyone is slow. This guide shows how to pinpoint the session and process responsible, then end the process or message the user.
How to log off disconnected RDP sessions
Disconnected Remote Desktop sessions keep holding memory and CPU long after the user has gone. This guide shows how to find them and log them off, on one server or across the whole farm.
How to see who is logged on to a Remote Desktop server
See every user signed in to your Remote Desktop Services hosts in one place. This guide covers the quser command for a single server and how to view all sessions across many servers at once.
Why You Should Monitor Failed Logon Attempts
Monitoring failed logon attempts plays a crucial role in maintaining the security of computer systems and networks. By diligently tracking and analyzing failed logon attempts, organizations can strengthen their defense against unauthorized access attempts and potential security breaches.
How to use multiple monitors to connect to Remote Desktop?
Multiple monitors option allows users to open a Remote Desktop connection expanded across all the monitors on the client computer regardless of a client monitor configuration.