Windows RDP Monitoring and Recording
Ekran System® perfectly fits your company’s monitoring and auditing needs for Windows desktop and Windows Server, recording both local and RDP user sessions on all endpoints.
- Windows Workstation Audit
- Windows 10
- Windows 8.1
- Windows 8
- Windows 7
- Windows Vista
- Windows XP SP2
- Windows Server Audit
- Windows Server 2019
- Windows Server 2016
- Windows Server 2012
- Windows Server 2008
- Windows Server 2003
Servers are critical endpoints in any corporate infrastructure, and recording terminal sessions on them is always on the security agenda.
Ekran System windows monitoring software is a powerful yet cost-effective tool for user recording and auditing on Windows Server. Indexed video and audio recordings of each user session allow you to track work with sensitive files and critical applications, plugging in of new devices, configuration changes, creation of new users and updating of profiles, etc.
Ekran System provides a range of server monitoring clients to meet the monitoring needs of endpoints of different types – from infrastructure server auditing to recording an unlimited number of sessions on a terminal server to recording all RDP sessions on jump boxes. See the Ekran System Licensing Scheme for more details on available packages.
Besides Windows Server monitoring, Ekran System agents can deliver access management and identity management functionality, from multi-factor authentication and one-time passwords to full-functional privileged access and session management.
Installed on a Windows PC, Ekran System controls all user activity by recording remote desktop protocol (RDP) sessions and local sessions. All recordings are stored in an indexed, easy-to-analyze, and searchable video and audio format. Windows remote desktop session recordings also include accompanying metadata: the names of open applications and windows, visited URLs, connected USB devices, etc.
Ekran System RDP monitoring software will record any RDP session, Telnet, console, or remote PC management session as a video and audio stream together with all typed keystrokes and other metadata.
Ekran System is the solution that can monitor all remote activity of your users on cloud desktops provided by Amazon WorkSpaces. Ekran records remote sessions and controls RDP user activity sessions on Windows 7 and Windows 10 cloud desktops in real time. These cloud desktops are powered by Windows Server 2008 R2 and Windows Server 2016, respectively, so you can also monitor any activity on the servers themselves.
Windows RDP monitoring includes:
Recording of all RDP sessions:
- Recording of other graphical sessions, regardless of the protocol or application: LogMeIn, Radmin, etc.
While the main use case is to monitor RDP sessions, Ekran System Windows session monitoring functionality also provides indexed video and audio logs for local sessions on Windows servers.
All recorded sessions include searchable metadata with user activity details as well as all typed keystrokes and information about connected devices.
RDP session monitoring allows you to:
- Get notified in real time whenever an RDP connection is established
- Monitor all remote connections
- Record Windows terminal sessions
- Configure alert notifications
- Monitor server and endpoint activity in real time
- Export sessions in encrypted formats
- Define report parameters
Learn how to monitor RDP sessions being established with your server in the demo video
Additional incident response tools include Windows Server user blocking, user warning with mandatory action acknowledgement, process termination, and device blocking.
The Windows user activity monitoring software offered by Ekran System is protected from any attempts to stop the service, block its work, or uninstall the agent.
Ekran System is continuous Windows desktop and Windows Server employee monitoring software. Even if the connection to the Ekran System managing server is temporarily lost, the endpoint client continues to record RDP sessions and local sessions, storing monitoring results locally and uploading them to the server when the connection is re-established.