How to enable Remote Access logging in Windows XP (894565)


The information in this article applies to:

  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Media Center Edition
Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

INTRODUCTION

This article describes how to enable Remote Access logging in Microsoft Windows XP. Remote Access logging provides the user name and the logon time whenever users access the system remotely.

MORE INFORMATION

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.You can enable Remote Access logging in the System log by adding a DWORD value in the Windows registry. To do this, follow these steps:
  1. Click Start, click Run, type regedit the Open box, and then click OK.
  2. Locate the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters

    Right-click the Parameters subkey, point to New, and then click DWORD Value.
  3. Type LoggingFlags as the name of the newly created DWORD value.
  4. Double-click LoggingFlags, type 2 or 3 in the Value data box, and then click OK.

    Note The maximum DWORD value here is 3.
  5. Quit Registry Editor.

    Note For these changes to take effect, you must restart your computer.
Remote Access logs will now appear in your System log.

REFERENCES

For additional information about the event logs in Event Viewer in Windows XP, click the following article number to view the article in the Microsoft Knowledge Base:

308427 How to view and manage event logs in Event Viewer in Windows XP

Modification Type:MajorLast Reviewed:3/10/2005
Keywords:kbhowto kbinfo KB894565 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.