topic terminal Agent - session 0 "no need to handle" in General Topics

terminal Agent - session 0 "no need to handle"

pkonitz — Tue, 06 Aug 2013 12:35:20 GMT

hi all,

I've encauntered the issue with terminal agent mapping.

Everything is working fine for normal users using terminals but for local console Administrator it is pain in the a...

It seems that Terminal Agent is skipping this mapping (local console for session 0)

07/26/13 08:19:26[Debug 1273]: Session 0, name Console.
07/26/13 08:19:26[Debug 1282]: Session 0, username ad-kurzeja.
07/26/13 08:19:26[Debug 1296]: Session 0, domain name XP.
07/26/13 08:19:26[Info  1321]: str for username is XP\ad-user
07/26/13 08:19:26[Debug 1337]: Session 0, no need to handle.

however this user is mapped properly in AD logs so User-ID agent seem to see this mapping.

The problem is that normal terminal users when they logg in to the terminal and are mapped to IP:port range they are also seen in User-ID Agent mapping so current mapping is overwritten (for terminal server).

We can't use exlude list on USER-ID Agent cause console users won't be mapped at all. The problem could be solved if Terminal Agent was doing all the mappings (for remote users and console users). Can this be accomplished?

or maybe some scripts for API?

regards

Przemek

Re: terminal Agent - session 0 "no need to handle"

mikand — Sun, 11 Aug 2013 18:39:19 GMT

What about creating a group policy which prohibts locally logged in user(s) to reach the network/internet?

Other than that I think you would need to use the regular userid to get a log of regular DC logins.

Sounds something you should contact the support with and then get back to this thread with the result

Re: terminal Agent - session 0 "no need to handle"

pkonitz — Mon, 12 Aug 2013 05:54:28 GMT

We opened the case and they did replicate the problem so I'm avaiting the result

the problem is that this locally logged users should access the Internet but with the rights of Administrator Policy on PALO so either Terminal Agent or User Agent need to do the mapping of this user.

Meanwhile:

- terminal agent ignores console 0 - doesn't see the mapping

- user id agent does the mapping but whenever normal terminal user logs in, AD seems to create similar logs and user id agent overwrites this mapping

regards

Przemek