Home > Products > Windows Passwords > Reset Windows Password > Screenshots > Remote Desktop > Remote Desktop events
Analyze events related to the Remote Desktop activity
17.04.2024
Reset Windows Password v14.2
Telegram data recovery, Photo Database and Media Player investigation tools, and some more
12.04.2024
Office password recovery tools
Resetting VBA passwords
01.03.2024
New blog post
Dumping the history of users' IP addresses in Windows
20.02.2024
Reset Windows Password v14.1
IP addresses history viewer, fast disk search, local security editor and some more

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: Remote Desktop event viewer


When using the Terminal Server Client (also known as Remote Desktop Connection) in Windows, various events related to the client are saved and can be viewed later using the Event Viewer. To view events related to the Terminal Server Client, open the Event Viewer, navigate to the "Applications and Services Logs" section, expand the "Microsoft" folder and select the "TerminalServices-ClientActiveXCore" log.

The Event Viewer is a tool in Windows that allows users to view and manage system and application logs. However, it can only be accessed after logging in to the account. Another issue is that events related to the Remote Desktop are scattered across different logs and not restricted to the "TerminalServices-ClientActiveXCore" log. 

This program feature overcomes both problems by gathering as many events related to RDP connections as possible, extracting additional data from the "TerminalServices-RemoteConnectionManager," "RemoteDesktopServices-RdpCoreTS," "TerminalServices-LocalSessionManager," "System," and "Security" logs.

 

Selecting Windows directory

Remote Desktop events location

To do this, specify the directory where Windows is located.


 

Remote desktop events viewer

Remote Desktop event viewer

Viewing the found RDP logs. You can use the context menu to save the list as HTML report.
 

Please note that it may take some time to enumerate and analyze all log items.