An Administrator can configure Command Risk to automatically disconnect a remote session when a particular risk level is detected or when a user executes a particular command.
The administrator can add commands to a rule and enable the auto disconnect feature for the required commands that can be performed on the remote Windows server or desktop.
NOTE:For a pcksh session: the disconnect based on the risk can happen either when the command /usr/bin/pcksh -o audit 1 or /usr/bin/pcksh -o audit 2 is defined in the Rewrite field for the Commands object, or when the Enhanced Access Control Policy script is added.
To configure disconnecting the session automatically, perform the following:
In the navigation pane of the command control console, click the command icon then select Command.
In the details pane, click Command risk.
Set Command Risk.
For information on setting the command risk refer Setting the Command Risk.
Specifying 1 in Auto disconnect field will automatically disconnect the user when the specified command is executed on the host server. Specifying 1 in Auto Block will block the user from further starting the session.