Phone Lines icon GFI Support Home

Articles in this section

See more

GFI Webmonitor shows activity under the wrong username when connecting through Terminal Services

Author: Luis Fernandes

Answer

PROBLEM

GFI WebMonitor reports browsing activity under the wrong username when multiple users connect through Terminal Services.

ENVIRONMENT

  • GFI WebMonitor
  • All supported environments

SOLUTION

Version 2013
 
Perform the following to disable caching of authentication data in WebMontior: 
  1. Open the Registry (Start > Run > type regedit and press Enter)
  2. Locate one of the following keys, depending on your environment:
    • 32 bit: HKEY_LOCAL_MACHINE\SOFTWARE\GFI\WebMonitor 
    • 64 bit: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\GFI\WebMonitor
  3. Right click and select New > DWORD Value
  4. Enter the following for the new value:
    • The DWORD should be named: SocketOrientedAuthentication 
    • The value given should be: 1 
  5. Once done, restart the following services:
    • GFI WebMonitor
    • GFI WebMonitor Core Service
    • GFI Proxy (Standalone Proxy version only)
    • Microsoft Firewall (Microsoft ISA installations only)
    • Microsoft Forefront TMG Firewall (Microsoft TMG installations only)
Version 2015

GFI WebMonitor Version 2015 has a different system to detect users and the registry key for GFI WebMonitor 2013 will have no effect. if facing this problem with 2015 check the Credentials Manager on the Terminal Server and remove all entries from there. Restart the browser and try again.

CAUSE

By default GFI WebMonitor caches authentication data which causes this problem when multiple clients connect from the same IP. The above solution disables caching of authentication data so users can be identified correctly.