How to enable Remote Access logging in Windows XP

This article describes how to enable Remote Access logging in Microsoft Windows XP. Remote Access logging provides the user name and the logon time whenever users access the system remotely.

Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.You can enable Remote Access logging in the System log by adding a DWORD value in the Windows registry. To do this, follow these steps:

1. Click Start, click Run, type regedit the Open box, and then click OK.
2. Locate the following registry key:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess\Parameters
   Right-click the Parameters subkey, point to New, and then click DWORD Value.
3. Type LoggingFlags as the name of the newly created DWORD value.
4. Double-click LoggingFlags, type 2 or 3 in the Value data box, and then click OK.
   
   Note The maximum DWORD value here is 3.
5. Quit Registry Editor.
   
   Note For these changes to take effect, you must restart your computer.

Remote Access logs will now appear in your System log.

For additional information about the event logs in Event Viewer in Windows XP, click the following article number to view the article in the Microsoft Knowledge Base: