## TermService

Seen on:
* Windows 2000

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermService</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\ntdll.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\sp3res.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\termsrv.exe</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows 2003
* Windows XP 64-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermService</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\ntdll.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\termsrv.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\ws03res.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows XP 32-bit

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermService</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\System32\ntdll.dll</td>
    </tr>
    <tr>
      <td>&nbsp;</td>
      <td>%SystemRoot%\System32\termsrv.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;

Seen on:
* Windows Vista

<table border="1" class="docutils">
  <tbody>
    <tr>
      <td><b>Log type(s):</b></td>
      <td>System</td>
    </tr>
    <tr>
      <td><b>Log source(s):</b></td>
      <td>TermService</td>
    </tr>
    <tr>
      <td><b>Event message file(s):</b></td>
      <td>%SystemRoot%\system32\termsrv.dll</td>
    </tr>
  </tbody>
</table>

&nbsp;