# Check who has remoted in to a PC

Powershell script&#x20;

{% embed url="https://learn.microsoft.com/en-us/answers/questions/486771/how-to-collect-rdp-access-logs-for-my-windows-mach.html" %}

Event viewer/powershell&#x20;

{% embed url="http://woshub.com/rdp-connection-logs-forensics-windows/" %}
