BlackFog has been designed to work with Microsoft Remote Desktop Services (aka Terminal Services). When installed within a server environment and Terminal Services enabled BlackFog is able to protect all logged in clients. It automatically enables server mode using a single instance of BlackFog to isolate and protect each user.
In this mode the traffic is isolated based upon each logged in user and automatically disables the Hosts and Processes dialogs in the main dashboard. These dialogs are still available for administrators logged into the console of the main server.
You can determine the mode of operation by selecting the about dialog and looking for the line called Terminal Services (Remote Desktop Services). This will say Inactive or Active as shown below. If you are logged in via Terminal Services (Remote Desktop Services) you will see that your active session number will be displayed as something other than session 1.