Remote Desktop IP missing in Event Log

Question

I was checking my remote desktop event logs and an entry is confusing for me.

The event was a normal log on event with a username, but at details have a dash (-) for the source IP instead of a source IP address there.

The other events there have the correct source IP, so why does this entry not have an IP address for the source?

Here is the event log description
English: http://pastebin.com/CtHC6xKD
The text in the other window is the same except the IP.

Might be useful if you post a screenshot of the event. Not anything to go on otherwise, TBH. — HopelessN00b, Nov 08 '12 at 22:14
here is the schreenshot: http://img138.imageshack.us/img138/5029/servereventlog.png — freshbox, Nov 09 '12 at 18:13
Better, but can you post the information that's scrolled off the window in those two event log windows? — HopelessN00b, Nov 09 '12 at 18:29
It would be helpful to see the Logon Type for both of these events, which is nearer the top of the Event details window. — joeqwerty, Nov 10 '12 at 20:07
The caller PID is different on the event with the "-". That's a clue, I think. I suspect the "-" logon isn't an interactive logon coming in thru Winlogon. — Evan Anderson, Nov 10 '12 at 20:16
Ok this doesen't works here in comments, here are the differences: http://pastebin.com/sz2MqpJg — freshbox, Nov 11 '12 at 15:35

score 0 · Answer 1 · edited Apr 13 '17 at 12:14

0

This is because client authenticating via network logon. You need to change it to remote desktop connection

edited Apr 13 '17 at 12:14

Community

answered Aug 05 '15 at 13:26

apm

1 Answers1