Remote Access Connections by User

This report provides a list of remote connections. The report includes RAS connection events (20048—Windows 2000; 20050—Windows NT) from the System event log with the Remote Access source. The report is sorted by user account name, with the most recent event listed first.

The columns of this report are defined as follows:

User Account
Specifies the name of the user account that logged on to the remote access server.
Server
Specifies the name of the remote access server to which the connection was made.
Port
Specifies the port on the remote access server used for the connection.
Bps
Specifies the transmission rate, in bytes per second, for the connection.
Sent
Specifies the number of bytes sent.
Recv
Specifies the number of bytes received.
Connected
Specifies the date and time the user account identified in the User Account column requested the connection.
Disconnected
Specifies the date and time the user account identified in the User Account column ended the connection. If this column is blank, the user did not end the connection within the date and time range specified in the report criteria. For a logon and logoff to be paired, the logon ID (session) must be identical.
Time Connected
Specifies the amount of time connected, calculated as the difference between the times in the Connected and Disconnected columns.
Logoff
Specifies the reason for the end of the connection.