Monitor connected remote clients for activity and status
Updated: March 24, 2015
Applies To: Windows Server 2012 R2, Windows Server 2012
Note: Windows Server 2012 combines DirectAccess and Routing and Remote Access Service (RRAS) into a single Remote Access role.
You can use the management console on the Remote Access server to monitor remote client activity and status.
You must be signed in as a member of the Domain Admins group or a member of the Administrators group on each computer to complete the tasks described in this topic. If you cannot complete a task while you are signed in with an account that is a member of the Administrators group, try performing the task while you are signed in with an account that is a member of the Domain Admins group.
To monitor remote client activity and status
In Server Manager, click Tools, and then click Remote Access Management.
Click REPORTING to navigate to Remote Access Reporting in the Remote Access Management Console.
Click Remote Client Status to navigate to the remote client activity and status user interface in the Remote Access Management Console.
You will see the list of users who are connected to the Remote Access server and detailed statistics about them. Click the first row in the list that corresponds to a client. When you select a row, the remote user activity is shown in the preview pane.
Windows PowerShell equivalent commands
The following Windows PowerShell cmdlet or cmdlets perform the same function as the preceding procedure. Enter each cmdlet on a single line, even though they may appear word-wrapped across several lines here because of formatting constraints.
The user statistics can be filtered, based on criteria selections, by using the fields in the following table.
The user name or alias of the remote user. Wildcard characters can be used to select a group of users, such as contoso\* or *\administrator.
The computer account name of the remote user. An IPv4 or IPv6 address also can be specified.
DirectAccess or VPN. If DirectAccess is selected, all remote users who are connected by using DirectAccess are listed. If VPN is selected, all remote users who are connected by using VPN are listed.
The IPv4 or IPv6 address of the remote user.
The inner IPv4 address of the tunnel that connect the remote user to the corporate network.
The inner IPv6 address of the tunnel that connects the remote user to the corporate network.
The transitioning technology that is used by the remote client. This is Teredo, 6to4, or IP-HTTPS for DirectAccess users, and it is PPTP, L2TP, SSTP, or IKEv2 for VPN users.
All users who are accessing a particular corporate resource or an endpoint. The value that corresponds to this field is the hostname/IP address of the server.
The Remote Access server to which clients are connected. This is relevant only for cluster and multisite deployments.