[How to] View RDP Access Log IP Addresses in Windows VPS

You might find yourself wondering how to view IP addresses that have accessed RDP on your Windows VPS, or how to review the RDP access log to see who logged in last. This quick how-to will show you how to use the Event Viewer in Windows Server.

First, open Event Viewer (you can search in the Start menu). Then, navigate to:

Applications and Services Logs\Microsoft\Windows\TerminalServices-LocalSessionManager

Under that view, double-click to open the ‘Operational’ view. You can double-click the entries to see more information about when they were logged, including the origin IP address:


This process applies to:

  • Windows Server 2008 R2
  • Windows Server 2012 R2
This entry was posted in Guides & How To's, Tech Support, Windows Server, Windows VPS and tagged , , , , . Bookmark the permalink. Both comments and trackbacks are currently closed.

Questions? We're here to help.