Regarding Recording tab in the policy settings, the "On Violation" settings available for RDP. Is it enable both command filter and socket filter? If available, is there the limitation like during the command prompt are used only?
CA Privileged Access Manager (PAM) r3.x
RDP with Socket filter only can be used with "On Violation".