You can log incoming FTP connections in the System event log by setting values for LogAnonymous and LogNonAnonymous in the Registry, as described in "Advanced Configuration Parameters for FTP Server Service" later in this chapter. By default, these value entries are not in the Registry, so you must add them to log incoming connections.
You can specify whether event log entries are made for both anonymous and nonanonymous users connecting to the FTP Server. You can view such entries in the System event log by using Event Viewer.