It's in the security event log entry. I think the Logon ID is 10 for terminal services logons. If you want more info, PM me. IP address is logged, not machine name. And even then only if you audit ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results