run or close automatically Windows Event Viewer logs display Event ID 4624 (for logon attempts) with Logon type 10 (for remote logons). To see who is logged into a computer remotely, open the ...