RDS User Logging

siringo

I need to get a list of RDS user log in times & dates, logoff times and dates and connection times.

I need to be able to put that info into Excel.

I'm sure you can get it with Powershell but ATM I can't find anything to work with.

I've looked at the RDPSoft apps, but I think I'll have to pay to get the reports I want.

Thanks for any help.

dbeato

@siringo Found this
https://cloudwrk.com/windows-server-rds-user-auditing-login-logout-session-disconnects/

You would want to enable Auditing though and have a SIEM to gather the logs from Event logs.

JasGot

This PS script may work for you. You may have to massage the output to create a CSV file for Excel.

He keeps it updated.

Make sure Auditing is turned on for:
Audit Logoff – When a user is logged off.
Audit Logon – When a user authenticates to Windows
Audit Other Logon/Logoff Events – Computer lock, unlocks, RDP connects and disconnects

This auditing needs to be turned on for any solution you choose.

His blog:
https://adamtheautomator.com/user-logon-event-id/

His GitHub:
https://github.com/adbertram/Random-PowerShell-Work/blob/master/ActiveDirectory/Get-UserLogonSessionHistory.ps1

He last updated it April, 2021

siringo

Thanks guys I'll check themnboth out.

siringo

I ended up using a tool from RDPSoft. You can take out monthly subscriptions to use their software. Very impressive stuff.