UserCheck Agent on the terminal server

[Hllrdm]

We encountered a problem that when we install the UserCheck Agent on the terminal server, all of our users get a UserCheck message at the same time.
That is, when a user tries to access a resource, he gets a blocking message with UserCheck. This message is received by all users who are currently connected to the terminal server.
How can I fix this problem?

[PhoneBoy]

The UserCheck agent is meant for a single user PC as far as I know.
I don’t think we have something equivalent that runs on a terminal server.

And you are running MUH on your terminal server, correct?

[Hllrdm]

No, we only use the UserCheck Agent. So Check Point does not mean to use the UserCheck Agent for terminal servers?

[PhoneBoy]

If you're not using MUH on your terminal server, we have no way of knowing what user is doing what.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Hllrdm]

Do I understand correctly that if we configure MUH, it supports the UserCheck functionality? Or do we have to install the UserCheck Agent in order to get notifications about forbidden actions?
We are also wondering if UserCheckAgent is supported on terminal servers at all, so that notifications will come to a specific user on the terminal server and not to all active users?

[PhoneBoy]

Perhaps @Royi_Priov can confirm if UserCheck supports terminal servers or not.
Independent of that, if you want to know what user on the terminal server is doing something (either for visibility or access control purposes), MUH is absolutely required.