How to filter Remote Desktop connection in Event Log filter

No.................still no.

I was kind of wrong first time, if you have no control over the server then you are still out of luck but if you can get admin access then you can install the 'remote desktop web connection' subcomponent of IIS's WWW service via control panel and then browse to http://whatever/tsweb

Try it and let us know ok.

Verify that it actually rebooted - if you can do a "net use" against the remote server, then connect to Event Viewer to see if it actually did reboot. I've seen plenty of Win2k3 servers that, when rebooted from an RDP session, don't actually reboot but stop responding to RDP. If that's the case, you can do a shutdown /i against the server or use some other out-of-band method of actually executing the reboot.

And if this is the case, in the future, don't reboot from a regular RDP session. Reboot only from the /console or /admin connection, or use shutdown /i, or other remote methods.