https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136613#M73554 <P>Do I understand correctly that if we configure MUH, it supports the UserCheck functionality? Or do we have to install the UserCheck Agent in order to get notifications about forbidden actions?<BR />We are also wondering if UserCheckAgent is supported on terminal servers at all, so that notifications will come to a specific user on the terminal server and not to all active users?</P> Fri, 17 Dec 2021 08:09:09 GMT Hllrdm 2021-12-17T08:09:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136528#M73550 <P>We encountered a problem that when we install the UserCheck Agent on the terminal server, all of our users get a UserCheck message at the same time.<BR />That is, when a user tries to access a resource, he gets a blocking message with UserCheck. This message is received by all users who are currently connected to the terminal server.<BR />How can I fix this problem?</P> Thu, 16 Dec 2021 11:33:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136528#M73550 Hllrdm 2021-12-16T11:33:06Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136600#M73551 <P>The UserCheck agent is meant for a single user PC as far as I know.<BR />I don’t think we have something equivalent that runs on a terminal server.</P> <P>And you are running MUH on your terminal server, correct?</P> Fri, 17 Dec 2021 06:05:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136600#M73551 PhoneBoy 2021-12-17T06:05:12Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136601#M73552 <P>No, we only use the UserCheck Agent. So Check Point does not mean to use the UserCheck Agent for terminal servers?</P> Fri, 17 Dec 2021 06:08:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136601#M73552 Hllrdm 2021-12-17T06:08:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136609#M73553 <P>If you're not using MUH on your terminal server, we have no way of knowing what user is doing what.<BR />See:&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk66761&amp;partition=Basic&amp;product=Identity" target="_blank">https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk66761&amp;partition=Basic&amp;product=Identity</A></P> <P>&nbsp;</P> Fri, 17 Dec 2021 07:49:51 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136609#M73553 PhoneBoy 2021-12-17T07:49:51Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136613#M73554 <P>Do I understand correctly that if we configure MUH, it supports the UserCheck functionality? Or do we have to install the UserCheck Agent in order to get notifications about forbidden actions?<BR />We are also wondering if UserCheckAgent is supported on terminal servers at all, so that notifications will come to a specific user on the terminal server and not to all active users?</P> Fri, 17 Dec 2021 08:09:09 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136613#M73554 Hllrdm 2021-12-17T08:09:09Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136678#M73555 <P>Perhaps&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/8232">@Royi_Priov</a>&nbsp;can confirm if UserCheck supports terminal servers or not.<BR />Independent of that, if you want to know what user on the terminal server is doing something (either for visibility or access control purposes), MUH is absolutely required.</P> Fri, 17 Dec 2021 19:42:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/UserCheck-Agent-on-the-terminal-server/m-p/136678#M73555 PhoneBoy 2021-12-17T19:42:14Z