Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
How to run a Search to see all Logon Activity Results related to "Remote Interactive" regardless of the event class?
Description
When looking at Logon activities events, is there a way to only see the data that is related only to RDP sessions?
Resolution
To run a Search and show events only related to "Remote Interactive" logons, regardless of the class type, do the following:
Create a new Search and in the "What" tab, go to Add > Subsystem > "Logons..."
Choose "Remote Interactive" and click on "Add", then click "OK"
Search results should now show only events related to interactive remote logons. Change the "When" tab information if you need to see events from a specific time frame.
Additional Information
It is a requirement to have the Change Auditor Logon Activity license to see this type of event data:
https://support.quest.com/technical-documents/change-auditor-for-logon-activity/user-guide
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
Change Auditor
7.5, 7.4, 7.3
Topic(s):
How To, Configuration, Troubleshooting, Technical Solutions
Article History:
Created on: 6/5/2025 Last Update on: 6/5/2025
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
Search All Articles
IE 8, 9, & 10 No longer supported
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.