We are having a problem where IT admins are disabling logons on a 2008 terminal server under RD Session Host Configuration. Is there a way to audit this and see when it is happening and possibly what user is doing it?
↧