Skip to main content
Question

Password Safe Web Apps and Desktop Apps Overlapping issue

  • November 23, 2025
  • 6 replies
  • 33 views

I have a very unexpected behavior in my environment.
I have multiple desktop applications and web applications created using both PS Automate and AutoIT.
Sometimes a user tries to launch Application X, but instead Application Y is launched, and the wrong credentials are supplied.
I need to know how to troubleshoot this issue.

6 replies

Arno
Forum|alt.badge.img+4
  • Rising Star
  • November 24, 2025

Hi, 

The log level can be increased in the INI file. This will allow you to see any errors that may occur.

At the behin of the File:

EnableLogging=4

LogMethod=1

Than retry the connection.

https://beyondtrustcorp.service-now.com/csm?id=kb_article&sys_id=9ae0186747cd7e10b77b3ddbd36d4302&table=kb_knowledge

Regards

Arno 


Pulitros144
Forum|alt.badge.img+4
  • Rising Star
  • November 24, 2025

@AlaaKH Can you confirm whether the registry key that allows users multiple sessions is set on your remoteapp server? Your user might be connecting to an orphaned session instead of initiating a new one

fSingleSessionPerUser - 0

 


  • Author
  • Apprentice
  • November 24, 2025

Thanks ​@Arno  ​@Pulitros144  for your reply.
I checked; it is set to 0. However, I have noticed a KB mentioning something related to:
"Log off disconnect" and "Force termination" settings are not working in version 24.3, and therefore, RDP session overlap is occurring. Log off on disconnect is governed by the Enhanced Session Auditing (ESA). When ESA deploys correctly, the BeyondTrust PasswordSafe Monitoring Task is also deployed and will "watch" for the disconnect and log off the Windows user.

KB link: https://beyondtrustcorp.service-now.com/csm?sys_kb_id=b9a3f55f47e2a25015c43e7d826d4344&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=026e6a9f1b15f2106fe95287624bcb84

I am on the same version mentioned in the KB. Has anyone encountered this issue?
Can the issue mentioned in the KB cause this behavior?


Pulitros144
Forum|alt.badge.img+4
  • Rising Star
  • November 24, 2025

@AlaaKH If ESA is not working, then yes, you would have a problem with overlapping sessions. Your best solution would be to apply the fixes indicated in the KB or simply update the Password Safe. In a worst-case scenario, you should open a support case to request the PBSM that includes the fixes for this issue.


  • Author
  • Apprentice
  • November 24, 2025

@Pulitros144  How can I check that ESA is working or not ? and what is the BeyondTrust Password Safe Monitoring Task used for ? 
Noting that users not only overlap with disconnected session , it interrupt another active session sometimes also.


Pulitros144
Forum|alt.badge.img+4
  • Rising Star
  • November 24, 2025

@AlaaKH Check if the folder “C:\pbps” is being created on the remoteapp server, if not, then ESA is not working, that is the esiest way

 

about the ESA task, this Doc will explain better with examples and folders:

https://docs.beyondtrust.com/bips/docs/ps-sessions#enhanced-session-auditing