Press Win + R to open the Run dialog box, then type in eventvwr.msc to open Event Viewer. You can also search for Event Viewer. Then, navigate to Applications and Services Logs > Microsoft > Windows > TerminalServices-RemoteConnectionManager > Operational. Right-click on Operational and choose Filter Current Log. The Event ID of Remote Desktop Services is 1149, so enter 1149 to filter the log.
How to find incoming RDP connection logs in Windows Registry?
Navigate here: HKEY_CURRENT_USER > SOFTWARE > Microsoft > Terminal Server Client. Then, expand the Default Key, as it stores the history of the last 10 RDP connections. If you expand the Servers, it also contains the list of all RDP servers and usernames used previously to login. If you want to clear RDP connection history, you can right click it and delete it.
Comments