Teramind uses user-based licensing, meaning each unique user being monitored consumes one license.

A Teramind user is an employee whose activity is tracked by the Teramind Agent. A computer refers to any monitored device, such as a Windows PC, Mac, VDI, or Windows Server.

When the Revealed Agent is deployed, Teramind identifies users by their email address. In this mode, a user can only be logged into one computer at a time. If that same user logs in on a second machine, they will be disconnected from the first one.

When the Hidden Agent is used, Teramind identifies the user based on the logged-in account on the computer. If the user logs in with a domain account (such as an Active Directory account), then they can log into multiple machines without consuming additional licenses. As long as the user logs in with the same domain account, Teramind recognizes them as a single user and only one license is required.

However, if the user logs in with a local account—meaning the computer is not joined to a domain or the account is not a domain user—Teramind will identify the user in the format of username@computername.

For example:

employee-1@pc-1

employee-2@pc-2

Example Scenario:

In this case, although only two employees are using two computers, a total of three licenses are required because the system sees three unique users.

In environments where computers are part of an Active Directory (AD) domain, Teramind can uniquely identify users by their User Principal Name (UPN). If the same AD account is used to log into multiple machines, it will still be counted as a single user, using only one license. This setup makes licensing more efficient and flexible.

In contrast, in non-AD environments or when multiple AD domains exist, Teramind cannot reliably determine if different user accounts belong to the same individual. As a result, the same person could consume multiple licenses if they use different usernames or log in from machines with different hostnames. In non-AD environments, Teramind identifies users as username@hostname, treating each combination as a separate user.

There are also scenarios where a single person may use multiple accounts, such as a standard user account and a separate administrative account. If these accounts have different usernames or UPNs, they will be treated as separate users and will each consume a license.

To better manage licenses in diverse environments, Teramind provides two configuration tools: domain remapping and domain override.

Domain remapping allows administrators to convert one specific domain into another. This is useful when different domain suffixes are used for the same organizational identity.

Example:

[email protected] → [email protected]

This helps consolidate user identities across domains that represent the same person or department.

Check out the USE DOMAIN NAME REMAPPING option in the Settings > Active Directory section to learn more.

Domain override forces all users in the same computer —regardless of their original domain—to a single, specified domain. This is especially useful in non-domain environments or when usernames are consistent but domains are inconsistent or missing.

Example:

jdoe@workstation → [email protected]

jdoe@workstation2 → [email protected]

This will prevent unnecessary license consumption when the same user is the same across different computers but the domain is not the same.

Check out the TMDOMAINOVERRIDE Agent installation/configuration parameter to learn more.