Hi,
I have posted this in the Windows Server Remote Desktop Services forum but my query relates to any implementation of RDS with both desktop and server O/S instances acting as the remote desktop target - If this is the incorrect forum please direct me to a more appropriate location.
I am wondering if it is possible to differentiate, from event log details, in much the same way you can distinguish logon types (Interactive/network/Unlock etc. etc.), between a remote desktop session log off actively initiated by a user versus a log off initiated by RDS in response to a connected idle session time-out being reached and versus a log off initiated by RDS in response to a disconnected session time-out being reached?
Thanks in anticipation,
Jo