---
title: RDP Proxy Session Log Control 
slug: kronpam-reference-guide-legacy-ui-3-4-0/rdp-proxy-session-log-control
description: Learn how to configure settings in Kron PAM to limit privileged users' access to session logs. Discover how easy it is to disable or enable viewing of command logs, session video records, OCR logs, and key logs using specific parameters. By default, all p
docTags: 
createdAt: 2022-07-28T10:13:53.000Z
---

Kron PAM  allows privileged users to view session logs (see the Kron PAM  Logs section for more information on session logs). If a user is authorized to view session logs, they can access the RDP session’s video records, OCR logs, key logs, and command logs. Some properties can be defined in the user groups (see [User Group Properties](docId\:oxgpPnt-7U2ISTAn_6a4h))  to control the users’ ability to view RDP sessions video and command logs. To configure these settings:

1. Navigate to **User Management** > **User Accounts**.
2. Open the **User Group Definition **tab and click **Search** to list all the** User Groups**.
3. Right-click the desired** User Group**, and select **Show Properties**.
4. Add the parameters below to configure:

| **Parameter**                        | **Definition**                                                                                                                                                                                                                                               |
| ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **sc.command.log.disabled**          | To enable/disable the privilege to view command logs for users who are able to see session logs. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the command logs.                    |
| **sc.session.video.record.disabled** | To enable/disable the privilege to view session video records for users who are able to see session logs. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the session video records.  |
| **sc.ocr.log.disabled**              | To enable/disable the privilege to view OCR logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the OCR logs.                                         |
| **sc.keylog.log.disabled**           | To enable/disable the privilege to view key logs generated during RDP sessions. The default value is “false”. If the parameter is set as “true” the users in the related user group are unable to view the key logs.                                         |