{"id":6302,"date":"2019-03-20T21:13:35","date_gmt":"2019-03-20T20:13:35","guid":{"rendered":"https:\/\/michlstechblog.info\/blog\/?p=6302"},"modified":"2019-03-21T14:29:56","modified_gmt":"2019-03-21T13:29:56","slug":"windows-get-a-list-of-remote-desktop-logons","status":"publish","type":"post","link":"https:\/\/michlstechblog.info\/blog\/windows-get-a-list-of-remote-desktop-logons\/","title":{"rendered":"Windows: Get a list of Remote Desktop Logons"},"content":{"rendered":"<div class=\"twoclick_social_bookmarks_post_6302 social_share_privacy clearfix 1.6.4 locale-en_US sprite-en_US\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_6302')){$('.twoclick_social_bookmarks_post_6302').socialSharePrivacy({\"services\":{\"flattr\":{\"uid\":\"Michl\",\"status\":\"on\",\"the_title\":\"Windows%3A%20Get%20a%20list%20of%20Remote%20Desktop%20Logons\",\"the_excerpt\":\"Hi%2C%0D%0A%0D%0Aif%20you%20want%20to%20know%20who%20and%20from%20which%20station%20a%20user%20logs%20on%20via%20remote%20desktop%20you%20can%20use%20the%20following%20powershell%20commands.%0D%0A%20%28more%26hellip%3B%29\",\"txt_info\":\"2 clicks for more data protection:\\r\\n\\r\\nOnly when you click here, the button will be come active and you can send your recommendation to Flattr. When activating, data are transmitted to third parties. \",\"perma_option\":\"off\"}},\"txt_help\":\"When you activate these fields by clicking, information to Flattr may be transferred abroad, and probably may also stored there.\",\"settings_perma\":\"Enable permanently and accept data transmission. \",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/michlstechblog.info\\\/blog\\\/windows-get-a-list-of-remote-desktop-logons\\\/\",\"post_id\":6302,\"post_title_referrer_track\":\"Windows%3A+Get+a+list+of+Remote+Desktop+Logons\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div><p>Hi,<\/p>\n<p>if you want to know who and from which station a user logs on via remote desktop you can use the following powershell commands.<br \/>\n<!--more--><br \/>\nList new RemoteDesktop Session<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nGet-WinEvent -ProviderName   Microsoft-Windows-TerminalServices-LocalSessionManager|?{$_.ID -eq 21}|select-object Timecreated,Message|fl *\r\n<\/pre>\n<p>List established connections to an existing session<\/p>\n<pre class=\"brush: plain; title: ; notranslate\" title=\"\">\r\nGet-WinEvent -ProviderName   Microsoft-Windows-TerminalServices-LocalSessionManager|?{$_.ID -eq 25}|select-object Timecreated,Message|fl *\r\n<\/pre>\n<p>Michael<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi, if you want to know who and from which station a user logs on via remote desktop you can use the following powershell commands.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,4],"tags":[1336,73,1335,1338,1337,20],"class_list":["post-6302","post","type-post","status-publish","format-standard","hentry","category-windowsknowhow","category-windowsscripts","tag-desktop","tag-get","tag-list-remote","tag-logins","tag-logons","tag-windows-2"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/6302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/comments?post=6302"}],"version-history":[{"count":5,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/6302\/revisions"}],"predecessor-version":[{"id":6308,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/6302\/revisions\/6308"}],"wp:attachment":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/media?parent=6302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/categories?post=6302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/tags?post=6302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}