Tracking user logons from a computer
From: Tormod Kvalheim (kvalheim_t_at_hotmail.com)
Date: 3 Mar 2004 05:13:00 -0800
Running Windows server 2003. Would like to know from what MAC/IP a
user logged on from when using a Remote Desktop connection. Any
Security event ID with Category "Logon/Logoff" does not give Source
Network address for terminal server sessions....