How to tell if remote desktop is being used

First option - use command line to "query user /server:SERVERNAME" [or "quser.exe" - same thing]. This shows User name, Session name, Session Id, Session state, Idle Time and Logon Time for all logged in users.

Second option option - use command line to "query session /server:SERVERNAME". This shows User name, Session name, Session ID and Session state. It shows all sessions, including disconnected ones, which might be useful.

Third option: install Microsoft Remote Desktop Connection Manager, configure your server[s], then right-click on the server to "list sessions". This shows Session ID, Session state, User domain/name, client machine name. Note that quser and qsession don't show client machine name, which might be useful to identify who is actually using the machine. RDCM doesn't show idle/logon time though, and it's quite outdated and glitchy.

Also important to note that all methods will fail to show active sessions if current user does not have admin rights on the queried remote server. So use "runas /u:DOMAIN\adminUser cmd.exe" to start adming console first.

FWIW, my optical mouse does that all the time. Mouse quirk.
posted by deadfather at 7:09 AM on May 12, 2006

What sort of desktop are you using the mouse on? Woodgrains and other surfaces with varied colorings can throw the optics off and make your cursor jump all over creation. A plain, solid color surface is best for optical mice. I've actually resorted to using an old mousepad. Taping down a sheet of paper works well, too.
posted by Thorzdad at 7:19 AM on May 12, 2006

optical mice sometimes skip; get a different mousepad [or start using one if you're not] and see if it goes away. [every one of the optical mice I've ever used has skipped at one time or another - how much really depends on what kind of desk I'm sitting at at the time.] remote desktop in Windows XP will lock you out if someone else connects to it [you're only allowed to have one person at a time actively logged into the computer]. you could try turning off Remote Assistance - right click on My Computer, go to Properties, and uncheck it in Remote. you may not have permissions to do that though. the only other thing you may have is a rogue copy of VNC on there - you may be able to get your admin friend to scan for it. googling for VNC detectors was unsuccessful [it's a legit program and most copies of it don't have facilities to bury themselves in your system].
posted by mrg at 7:20 AM on May 12, 2006

If you are logged in nobody can remote desktop in. There is something else called remote assistance but if somebody is using that it's super obvious. Probably just a bad mouse.
posted by zeoslap at 7:59 AM on May 12, 2006

you can run the 'netstat' command from the command line to see whose connected.
posted by Mean Mr. Bucket at 8:02 AM on May 12, 2006

my cheap MS optical mouse does this all the time, i hate it, i cleaned out all my drivers as per what MS says and it came back just a few days later.
posted by yeahyeahyeahwhoo at 8:55 AM on May 12, 2006

My cheapo logitech mouse enjoys sending the mouse pointer towards the upper left corner of my screen if I leave it unattended for more than 10 seconds or so. I blame the earths magnetic field, and the ghost of John Candy.
posted by blue_beetle at 9:09 AM on May 12, 2006

Funny I've been thinking of asking this question for a week or so now, but I've been putting it off assuming I'm just being paranoid and that it was probably my optical mouse. Thanks for asking mikeanegus, and thanks to everyone else for calming my nerves.
posted by raedyn at 9:13 AM on May 12, 2006

Same here Raedyn! Along the same lines, is there a way to see if someone is piggybacking on my wireless connection?
posted by KevinSkomsvold at 11:29 AM on May 12, 2006

My cheap optical mouse used to do that all the time, and I'd always accidentally click on the wrong thing if I wasn't careful. My boyfriend hated it, and got his sister to buy me a new optical mouse for Christmas one year. I haven't had that problem since.
posted by limeonaire at 6:53 PM on May 12, 2006

« Older about turn   |   Good lunch on the Jersey Turnpike or Garden State... Newer »

This thread is closed to new comments.

This document provides steps to view the history of remote control connections for individual computers or for all computers. This information can be used when you are auditing various roles in your company.

Steps

You can view the remote-control history of:

  • Individual computers
  • All computers


  1. Click the Tools tab
  2. In the Windows Tools section, click Remote Control
  3. Click
    against the name of a computer to view its remote-control history

You can view the remote-control history of a specific computer.

To view the history of all computers, follow the steps given below:

  1. Click the Admin tab
  2. In the Tools section, click Action Log Viewer
  3. In the Select Module Type section, check the Remote Control checkbox
  4. Click show

You can view the remote-control history of all the computers in your network.

"Can someone access my computer remotely without me knowing?"

The answer is "Yes!".

This could happen when you are connected to the internet on your device. If you have a slight doubt that someone is spying on your computer remotely and want to know the ways about how to tell if your PC is being remotely accessed, then this post is for you.

We will guide you top 8 ways about how to tell if someone is viewing your computer remotely in no time.

Noted: The methods we provide cover both Windows and Mac computers.

How Do I Know If Someone is Accessing My Computer Remotely?

Figuring out whether someone is remotely viewing your computer or not is not a tough job, but you need to be a little cautious and clear your doubts right away.

Here are the 8 best methods of finding out if someone hacks into your computer and remotely monitor your computer. You can try any of these for confirmation.

Way 1: Disconnect Your Computer From the Internet

Everything is possible because of the internet. No internet means no one can remotely view your PC; if you doubt that someone is using your PC the same as you, immediately disconnect your internet.

Disconnecting the internet from the taskbar might not be enough because it can easily connect on its own. You need to do something more.

Steps to disconnect your computer from the internet

  1. Turn off the router/wifi.

  2. Remove ethernet cables.

  3. Forget network from wifi settings.

Way 2. Check the List of Recently Accessed Files

We all remember the last accessed file on our computer unless it's been ages or someone has used our computer. If you feel any unusual activity on your PC or Mac, your immediate step should be to check the recently accessed files. It will clarify whether or not if someone is accessing your computer.

Steps to check the list of recently accessed files on Windows PC

  1. Click on the taskbar shortcut.

  2. Open the file explorer window, and open the document folder.

  3. Select "quick access" from the left side of the file explorer window. Or you can also press Windows key + E. Then a list of recently accessed/viewed files will pop up. If any of the files in this list were not accessed by you, someone must be remotely monitoring your PC.

Steps to check the list of recently accessed files on Mac

Check recent items:

  1. Go to the menu bar on your Mac.

  2. Then click on the Apple Logo.

  3. Move your cursor to "Recent Items" and a list of the last 10 accessed items will appear on the screen, and they are divided into three categories - Applications, Documents and Servers. If you viewed all these items, relax; if not, it means someone is spying on you.

Check recent files:

  1. Open a Finder window on your Mac.

  2. Then click "Go" on the menu bar.

  3. Move your cursor to "Recent Files" and then you'll see the 10 folders that were most recently accessed on your Mac. If any of the files in this 10 folders were not accessed by you, then you need to pay attention.

Way 3: Check Your Browser History on The Computer

Checking your browser history is also a way to tell if someone is spying on your computer. Regardless of what browser you use, you can check it's brsowing history. Below we will guide you the detailed steps to do that on some mainstream browsers on a computer.

Steps to check your browsing history on Google Chrome

  1. Go to Google Chrome.

  2. Click on the three dots on the upper right corner, and click history.

  3. Your entire search history will open. Now analyze carefully and see whether or not you have made all the searches. If there are unusual searches, someone might be remotely monitoring your PC.

Steps to check your browsing history on Mozilla Firefox

  1. Open Mozilla Firefox on your computer.

  2. Click the icon that looks like a row of books and says "View history, saved bookmarks and more" on the menu bar.

  3. Click on "History" and check the browsing activities on this browser.

Steps to check your browsing history on Safari

  1. Go to Safari on your Mac device.

  2. Click on "History", and then "Show All History". Any search not made by you can be a sign of someone remotely viewing your device.

Steps to check your browsing history on Internet Explorer

  1. Launch Internet Explorer.

  2. Then select the "Explorer bars" from the scroll-down menu.

  3. Click on "History".

Steps to check your browsing history on Microsoft Edge

  1. Launch Microsoft Edge on your computer.

  2. Click the "Hub" icon at the menu bar.

  3. Click on "History".

Way 4: Check Recently Modified Files

A remote viewer might not only be viewing your files but also making changes to them. So you can check the history of "last accessed files on your computer to confirm if someone has used your PC remotely.

Steps to Check Recently Modified Files on Windows

  1. Open "File Explorer" on your computer.

  2. To search the entire computer, select the "This PC" option.

  3. Click the "Search" tab, and choose the "Date Modified" option, and then select a time range that you want to check. You can choose Today or go back to last month.

Steps to Check Recently Modified Files on Mac

  1. Open the Finder on your Mac, choose File > Find.

  2. Select "Kind" then choose "Other" in the pop-up window.

  3. Choose "OK" button and then click "Kind" again. Then you will see System Files displayed in the window. Click System Files and choose "are included" option in the drop-down menu.

  4. Click the "+" sign on the far right. Then change "Kind" to "Last modified date" and choose the time range you want to check, such as "Today".

  5. After that, you will see a list of files have been modified today on your Mac. Just confirm if you have modified them today.

Way 5: Check Your computer's Login Events

Checking login activity is another way of finding out if someone is remotely monitoring your device. Follow the simple steps given below to figure out.

Steps to check login events on Windows computer

  1. Go to the control panel and click on "System and Security" and "Administrative Tools".

  2. Then click "Event Viewer". On the left side, an option "Security" will appear, click and on it and wait for a window with all logon events to show. You will be able to detect any outsider by checking the administrative and standard logons and logoffs.

Steps to check login events on Mac

  1. Press Command + Space key to Spotlight Search on your Mac.

  2. Type "Console" in the search box then press Enter.

  3. In the next window, click "All Messages".

  4. Then type "wake" to check all the login events and the time stamps.

Way 6: Use the Task Manager to Detect Remote Access

Task managers can help you detect remote viewers within a few seconds. It is an ideal way to check on secret remote viewers. On Windows computer, it is called Task Manager, and On Mac computer, it is called Activity Monitor.

Below are the simple steps of using task management for detecting remote access on your computer.

Steps to use Task Manager to detect remote access on Windows

  1. Open Task Manager from the taskbar menu and search for one of the options below.

  2. Then you can check your list of running programs on your computer.

  3. Any of the programs not executed by you is a clear identification of a remote viewer.

Steps to use Activity Monitor to detect remote access on Mac

  1. Open the Finder and click the "Applications" option in the window.

  2. And open the "Utilities" folder.

  3. Then double-click the "Activity Monitor" application. Then you can see all the open processes on your Macbook in the "Process Name" section.

Way 7: Check Your Firewall Settings

Not everyone is comfortable with one specific method of doing anything. Hence, here we bring another simple and efficient way of detecting remote viewers - check your Firewall settings.

If you find out a program has been granted access to move past the firewall on your computer and you don't know that could be a sign that someone is spying on my computer remotely. Follow the simple steps below of reviewing your firewall settings and catch the spy.

Steps to check your firewall settings on Windows

  1. Go to your control panel and click on the "Windows Firewall" option.

  2. If you notice that a program has moved past your Firewall without asking you, this could indicate that a programmer has empowered far off access.

  3. If so, quickly eliminate any recent progressions to your firewall, restart your PC, and run the antivirus present in your PC, so no risk factors stay behind.

Steps to check your firewall settings on Mac

  1. Choose System Preferences from the Apple menu on your Mac.

  2. Then choose Security & Privacy and then the Firewall tab.

  3. Click "Advanced" to check the firewall settings on your Mac.

Way 8: Scan your Computer for Viruses and Malware

Scanning your computer for viruses and malware is not only an effective way of catching remote viewers but is also good for the overall health of your PC as well. It can help detect viruses etc., on your computer, and you can get rid of them in no time by running the program.

In case you are new and want to know "how can I tell if someone is spying on my computer remotely," follow the steps below to scan your computer.

Steps to scan Viruses and Malware on Your Computer

For Windows users:

If you want to use the built-in tools for scanning, go to settings and choose "Update and Security' and then click on "Windows Security" and wait for scanning programs to appear. Run one of those programs and follow the on-screen prompts.

For Mac users:

It seems like Mac itself doesnot have a build-in tool to scan for viruses and malware. So if you want to do that, you will need to use some third-party tools.

How to Stop Someone from Accessing Your Computer

How can you stop others from accessing your PC? You need to take action to protect your computer from these snoopers. There are three easy ways given below that can help you secure your computer.

Way 1: Update Your Password

If your password is old or easy to guess, it means it's super easy for anyone to get in. so change your password immediately and make sure not to tell anyone.

Way 2: Remember to Lock Your Screen

If you are sure your new password is strong enough, the second step is to develop a habit of locking your screen every time you move away from the laptop.

It is so because when you lock your screen, the snooper will log out as well, and he will need a passcode to enter again. In most devices, the "lock screen" option appears next to "shutdown" in the main menu.

Way 3: Log Out of Everything Everywhere

Another method is to log out everything everywhere. It will log you and the snoopers out. But the good part is, you can log in back with the new password, while the snooper can't. Hence it will be easier for you to keep a check on your computer's activity.

Bonus Tip - If You Want to Access Someone's Computer Remotely

If you want to access others' computers remotely and check what they are doing on the computer, you can turn to a third-party tool for help.

MoniVisor for Windows monitoring app is a recommended third-party tool that helps remotely track other PCS remotely. It can run in the background without getting noticed.

The main features of MoniVisor for Win are:

  • Catch who the target user are communicating with by checking social media chats.

  • Monitor all the emails sent or received via web-based email programs such as logging into Gmail account.

  • Access all browsing/download history of targeted users.

  • Take automatic screenshots of the target user's screen.

  • Track each keystroke that typed on the target PC's keyboard.

This software is safe to use and very easy to get started with. It also offers clear guide for you to follow. Or you can check the free demo below first to get more details about its features.

Monitor Now View Demo

Conclusion

There are various ways to tell if someone is remotely viewing your computer, and we've discussed some of the easy ones for you to detect remote access on windows and Mac computers. Hope it can help. Or you can tell us what you think in the "Comment" section!

Video liên quan

Chủ Đề