Easy way to detect if co-worker in the domain has remote accessed PC?

I have used NBTSTAT -a Etc.,
But are there better ways to prove it? using command line or sysinternals

Thanks guys