catch RDP switchover events