pelegk1

i have a windows 2008r2 server, that is not a part of a domain!

1) how can i write to a log, or using the system log to check when a user loged in/out from rdp? 2)is there a way to monitor, if a user changed a file and when, and if he stoped/started a service? 10X:)