1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Log of IP addresses accessing Windows 2012 Server

Discussion in 'Windows Server' started by paul_carron, Apr 23, 2015.

Thread Status:
Not open for further replies.
  1. paul_carron

    paul_carron Thread Starter

    Oct 15, 2006

    Is there any history or log on a Windows 2012 Server that will detail IP addresses that connected to the server? I've noticed a few pretty serious changes to settings on the server. Unfortunately the whole team uses the same logon(a problem I know) so I want to trace the IP address. I know the date and time the change was made so if I can get the IP address of any device that was connected at that time I think I'll know who made the changes.

  2. lunarlander


    Sep 21, 2007
    If you have enabled logging for "Audit account logon events" and "Audit logon events" in Local Security Policies > Local Policies > Audit policy. Then any account logon will generate an event viewer log entry.

    In Event Viewer, create a custom view and filter for Event ID's 4624,4636,4803,4801. These are all logon events. Then hunt for Logon Type: 3 manually, ( type 3 means network logon ) and you will see Source Network Address in the same log entry.
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1147091

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice