Ekran System® FAQ

System requirements

Ekran System supports the recording of up to 10,000 concurrent sessions per website. Please contact our Support team for more specific information on the configuration of Ekran System for large-scale deployments.

Yes. After the installation, you need to remove the unique Client GUID from the Windows Registry (HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem\Client\AgentGUID). On its first connection, each new machine receives a unique ID and is monitored as a separate instance.

According to our experience, 2 TB HDD is enough to store the records of 100 workstations for up to six months without having to perform a database cleanup or archiving.


The reason for this is typically incorrect settings of the Ekran Server IP address or its domain name which were provided during Client installation. You can check the settings applied in the HKEY_LOCAL_MACHINE\SOFTWARE\EkranSystem\Client\RemoteHost registry key. To make sure that the host name is correct, you should ping the server from the Client computer.

90% of these issues are caused by a lack of database storage space. In this case, archive or clean up your database. You can also enable database auto-cleanup by using the scheduler.

First, check if a license is assigned to the Ekran System Client. Also, please note that in the ”idle” state (i.e., there is no user activity on the endpoint), the Ekran System Client does not send any data to the Ekran System Application Server.

Ekran System functioning

Ekran System Windows Clients take screen captures and monitor metadata, including: user name, host name, keystrokes, clipboard text data, application names, active window titles, and activity time. Optionally, you can also capture information about URLs visited and USB devices plugged-in. By viewing the metadata, you can quickly find the information you need.

Ekran System Linux Clients capture entered exec* and sudo commands with all their parameters.

Ekran System macOS Clients take screen captures and monitor metadata, including: user name, host name, application names, active window titles, activity time, and URLs visited.

An Ekran System Client’s average CPU usage is less than 1%. When there is no activity, an Ekran System Client does not use the CPU at all.

An Ekran System Client uses up to 20 MB of memory. In the case of monitoring multiple sessions, Ekran System allocates 12 MB for each new session.

Since Ekran System is not a spyware application, it does not support process hiding. At the same time, Ekran System has a protection feature that prevents the Client from being terminated even by privileged users.

Whenever there is no connection to the Ekran System Application Server, the Ekran System Client stores the monitored data locally and automatically sends it to the Server as soon as the connection is restored. You can configure the local cache file size.

We recommend using our Full Feature Presentation. The latest version can be found in the Technical Documentation section.

Yes. It is possible to export a session or a part of it in encrypted form to view on any computer, even without access to the Management Tool. A session is exported to a signed executable file which includes an embedded player to display the graphical information and metadata.

Yes. You should install a Client on each virtual machine that are deployed on a hypervisor. Ekran System records all connections to virtual machines including those via VMware remote console, Hyper-V console, etc.

Ekran System installation & licensing

Ekran System provides a SaaS or on-premise deployment out-of-the-box. Please contact your MSP partner to learn about the additional options they can provide.

You can monitor subcontractor access via a Jump Box Server when subcontractors do not have access to production servers but instead have to connect to a Jump Box Server (Windows Terminal Server) to manage critical infrastructure. See more about licensing details here: Licensing Models

A new version of Ekran System Application Server is installed manually and replaces the previous version. All configurations remain the same. After you update the Ekran System Application Server, all Ekran System Clients will be updated automatically. You will receive a reminder about the expiration of the Ekran System update & support subscription beforehand, so that you can renew your subscription in time and continue having access to new releases.

Neither. The license is assigned to a physical computer. A Client with the Terminal Server license monitors an unlimited number of sessions on that computer. You can find more details about license types here: Licensing Models

One license allows monitoring one PC. You can easily unassign a license from it and assign it to a Client. There are no limitations.

You can download the trial version from the main page of our website and install it by following the installation instructions: Installation Checklist

Ekran system configuration & privacy settings

Ekran System allows you to enable a protected mode on Clients, which makes it impossible for the user to edit the Client log files, monitored data, and Client settings in the Windows Registry, or to delete Client files or the Client itself.

You can enable the displaying of an additional message on user login to inform the user that their actions are being monitored and notify them about corporate policies or the laws of the country. You can also enable the displaying of the tray notification and Ekran Client icons in the Windows system tray.

It is recommended to use Ekran System primarily to monitor the contractors that maintain your servers. If you are going to monitor the activities of your employees in the workplace, it is also possible to configure Ekran System according to the Article 29 Working Party recommendations and your corporate policy. For more information on this, please see our Resources page.

Yes. You can back up the monitored data by using Ekran System database archiving and cleanup. Archived data can be viewed at any time. You can also back up the full database file via native MS SQL or PostgreSQL tools.

Here is the list of the ports that need to be opened to guarantee the stable operation of Ekran System:

  • 9447, 9449 - for connecting Clients to the Server
  • 22712 - for the Tray Notification application connection
  • 22713, 22714 - for the Management Tool to connect to the Ekran System Application Server (if the Management Tool and the Server are installed on different machines)
  • 443 - for access to the Management Tool (if the Management Tool and the Server are installed on the same machine)