The first time I used these logs is when I was running an audit to figure out whether a specific user has recently accessed my server using Remote Desktop Connection.
In order to identify who has recently had a full session remotely running on your server, you: look at the events located at these two places:
Event Viewer > Application and Service logs > Microsoft > Windows > TerminalServices – Local SessionManager > Operational
Event Viewer > Application and Service logs > Microsoft > Windows > TerminalServices – RemoteConnectionManager > Operational
To have any events logged in here, you have to at least have these things in place:
- You must be running the Windows Feature AppServer (Terminal Services Application Server)
- The specified logs must be enabled.
With these conditions in place, these logs show give you the user names and computer names of all Remote Desktop sessions that have taken place between your computer and other client devices for a certain duration of time. Of course the length of the log depends on the properties you have set for the logs (e.g. Enabled logging, Maximum log size, what to do when maximum event log size is reached, etc.).
Please note that these logs can also be used to diagnose and troubleshoot RDS sessions that disconnect in an apparently random way.
One other place you can check is your Event Viewer > Windows Logs > Security which should have audit log of successful and failed logons if you had activated the “Audit logon events” in Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy snap-in.
Finally, a rather simple way you can go about it is by using the command line as an administrator and typing the following command (more about it at the Windows Command Line reference below):
net user username | findstr /B /C:"Last logon"
Do you know of any other ways to achieve this audit? Please let us know in the comment section.
Some other useful resources include:
Is Google Search Console failing to retrieve your website’s sitemap? It is possible that you need to refresh your permalinks.
To do that:
- Go to your /wp-admin page.
- Go to the “Settings” menu and click on Permalinks.
- Once on the permalinks page, without altering anything, click on “Save Changes.”
Give it some time and then go test yoursite.com/sitemap.xml and see if Google is finally picking something up.
You can find some more ideas here:
Uber has suffered a data breach a year ago, and the address and email information of 57 million people were stolen. Uber paid off the hackers who then supposedly deleted the data, but that cannot be confirmed.
Watch out for phishing emails related to this Uber data theft, for instance that your “Uber account was compromised” and that you need to change your password, or anything else related to Uber that could be suspicious.
Never click on a link in an email for situations like these, always go to the website yourself through your browser’s address bar or a bookmark you have set earlier.
Remember, Think Before You Click!
If you were using OS X Server in macOS Sierra then upgraded to macOS High Sierra, you are probably wondering what in the world happened to the Time Machine Option in OS X Server. A good discussion is going on about the question here, but we do have a solution for you:
As it turns out that Apple decided that Time Machine sharing will now become a part of macOS instead of Server 5.4. You can now used a shared Folder as a Time Machine backup destination using the Sharing preferences in your macOS System Preferences.
According to the Mac Help instructions, to Set up a shared Time Machine backup folder,
- Choose Apple menu > System Preferences, then click Sharing.
- Select the File Sharing checkbox.
- Click the Add button + at the bottom of the Shared Folders list.
- Navigate to and select the folder you want to use for sharing, then click Add.
- Select the name of the shared folder, click Options, then make sure “Share files and folders using SMB” is selected and “Share files and folders using AFP” is not selected.
- Control-click the name of the folder, then choose Advanced Options.
- Select “Share as a Time Machine backup destination.”
- If desired, select “Limit backups to,” then enter a size.
- Click OK.
The question remains, though, of how do you know your remote devices are currently being backed up or how much of their backup has been done and how much is left?
To show hidden files and folders on Mac,
- Launch Terminal
- Type the following command then press Enter:
defaults write com.apple.finder AppleShowAllFiles YES
To hide the hidden files again, just type the same command but replace YES with NO as follows
defaults write com.apple.finder AppleShowAllFiles NO
- After typing the appropriate command, look for your Finder icon (most likely on your Dock), then right-mouse click on it while holding the Option/Alt key of your keyboard. This will display a contextual menu from which you click Relaunch, to relaunch the Finder browser with your new visibility settings applied.
Now, if all you are looking for is how to display your Library folder in your user home folder, we have the steps in this short guide.