RDP Proxy Session Log Control
Kron PAM allows privileged users to view session logs (see the Kron PAM Logs section for more information on session logs). If a user is authorized to view session logs, they can access the RDP session’s video records, OCR logs, key logs, and command logs. Some properties can be defined in the user groups (see User Group Properties) to control the users’ ability to view RDP sessions video and command logs. To configure these settings:
- Navigate to Users > User > User Groups.
- Open the Users tab and click Search to list all the User Groups.
- Choose the desired User Group, and select Add New Properties.
- Add the parameters below to configure.
Parameter | Definition |
---|---|
sc.command.log.disabled | To enable/disable the privilege to view command logs for users who are able to see session logs. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the command logs. |
sc.session.video.record.disabled | To enable/disable the privilege to view session video records for users who are able to see session logs. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the session video records. |
sc.ocr.log.disabled | To enable/disable the privilege to view OCR logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the OCR logs. |
sc.keylog.log.disabled | To enable/disable the privilege to view key logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the key logs. |