SOLVED: Which User Logged on First When RDP’ing to a Server With Two Administrators Already Logged In

When you connect to a Windows Server via Remote Desktop Protocol (RDP) and see a list of logged-in users, the order in which the users are displayed does not necessarily indicate the sequence in which they logged on.

Microsoft does not have any documentation on the sort order of the popup SELECT A USER TO DISCONNECT SO YOU CAN SIGN IN window, which user logged on first. As such, we have to rely on testing from sites like www.woshub.com . They determined the display order can vary based on several factors, including the server’s internal processes and how it manages user sessions.

If you need to determine the logon times for each user there are two easy ways to do it:

1. Log in to a different computer on the same network and user the quser /server:[serverhostname] as we explain in this short article
2. Can check the Event Viewer logs on the server for Event ID 4624 in the Security log, which records successful logon events