How to avoid system haching

Hi all,
I have a local admin account as well as domain user login in my webserver. Always I login as domain admin account where IIS is configured.I found that somebody is connecting to my server via RDP And are using my system resources(I observed in task manager-users). I wanted to know is there any way to find from which location or IP user is connecting to our system