Windows Event for mapped drive RRS feed

  • Question

  • Dear all,

    Now I have a file server running Windows Server 2016. Only some users have permission to access that server. But in Event Viewer I see lot of non-privillege users with event id 4624 logon type 3 beside administrator users. I sure that those non-previllege users can't RDP to the server. How I can know that which event id is user mapped drive and which one is real user login?

    Monday, February 10, 2020 8:26 AM

All replies