---
title: RDP Proxy Session Log Control 
slug: kronpam-reference-guide-3-9-0/rdp-proxy-session-log-control
description: Learn how to configure settings in Kron PAM to limit privileged users' access to session logs. Discover how easy it is to disable or enable viewing of command logs, session video records, OCR logs, and key logs using specific parameters. By default, all p
docTags: 
createdAt: 2022-07-28T10:13:53.000Z
---

Kron PAM allows privileged users to view [Session Logs](docId\:eMMv60kV6Eli1nCrXomG1). If a user is authorized to view session logs, they can access an RDP session’s video records, OCR logs, key logs, and command logs. Some properties can be configured for user groups (see [User Group Properties](docId\:PSFmiFchdVnLap90Zb_Uy)) to control the users’ ability to view RDP session video and command logs:

1. Navigate to** Users > User > User Groups.**
2. Open the **Users** tab and click **Search **to list all **User Groups.**
3. Choose the desired User Group, and select **Add New Properties.**
4. Add the parameters below to configure.

| **Parameter**                        | **Definition**                                                                                                                                                                                                                      |
| ------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **sc.command.log.disabled**          | To enable/disable the privilege to view command logs for users who can see session logs. The default value is “false”. If the parameter is set as “true”, the users in the related user group are unable to view the command logs.  |
| **sc.session.video.record.disabled** | Prevents session video recording. Default value is **false**. When set to **true**, session videos will not be recorded. This parameter controls recording itself, not viewing permissions.                                         |
| **sc.ocr.log.disabled**              | To enable/disable the privilege to view OCR logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true”, the users in the related user group are unable to view the OCR logs.               |
| **sc.keylog.log.disabled**           | To enable/disable the privilege to view key logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true”, the users in the related user group are unable to view the keystroke logs.         |