The answer here isn't specific to Terminal Services, since that's just another way of monitoring domain logons. What you can do is enable security logging and then view those logon attempts in the Event Viewer. Just be warned: logging all logon attempts -- successful or not -- will generate a lot of events to sort through.
Dig Deeper on Legacy operating systems
Related Q&A from Christa Anderson
Expert Christa Anderson advises how to map images on a network share for user on a terminal server. Continue Reading
Expert Christa Anderson offers some ideas for monitoring who is connecting to a terminal server, and when they are connecting. Continue Reading
Expert Christa Anderson suggests some third-party software producst that can help in using a scanner with Terminal Services. Continue Reading