Hey folks,
I have a Server 2012 RDS environment, using multiple RDS Hosts, with a RD Connection Broker. I want (need) to figure out how many users I get logged in monthly, and how many of them use our RemoteApp for Excel, Word, Access, etc (read: SPLA). I've been scouring through post after post, trying to find something that will help me figure out what the user launches, to no avail. I started looking through my event viewer to see what I can find there, and I found something interesting, but very confusing. On the Connection Broker, I found an event, id 1040, with the following:
Remote application (Excel 2013) is launched using stored credentials on RemoteApp and Desktop connection (mycb.domain.com).
This seems to be what I'm looking for. It also has the user who launched. However, I have a SINGLE entry in my event viewer for this, and it was 6 months ago. The log I was looking at was Microsoft-Windows-RemoteApp and Desktop Connections/Operational. There are a total of 4 entries in this log, that's it. I checked the properties of the log, and it is set to "Enable logging". I can't figure out how to make this log these, or if I should be looking elsewhere. I was then intending to track these events using SCOM 2012 collection rule, so I can report and/or monitor if need be.
How do I configure this event log to show me these events so I can track them, OR, where else could I look for this information so I can track my users access of our Microsoft RemoteApps, OR, how else can I get the reporting I need?
Thanks much in advance!
mpleaf