We investigate a firm that connects to a outside file server, via remote desktop connection!
We have no credentials for RDC, so how can we find the location of the file server?
The usage of RDC will give us some aditional information in any log or else???
Thanks in advance
The system from which the connection is initiated will contain information (ie, name or IP address) of the server. For XP, it will be in the Registry, and on Windows 7, it will be found in the appropriate Jump List file.
You can also find the ip address and name of the server in the log files for the workstation. However, that will not tell you where the server is physically located if that is what you are looking for.
Hi,
You could find useful datas in the *.bmc files used during RD sessions.
Useful tool and infos
http//
The output is strange but in a case it was of great help to determine what the user has done (use of event viewer, date and hour of logon,…) !
Hope that helps.
Thierry
What you want to find actually about the server..?
Its location, its configuration or its accessibility..?
in all the cases the link given below will help you to find out the info
http//