This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ad auth

Hi, I do not know if I forgot something, more in the authentication settings this all correct as the images, but when I see the log appears only the admin user in STAS.
Why does this happen?

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago

Hi ElvioOliveira Junior,

The user list you are seeing on XG can be generated if those users ever logged in to User Portal. The user you are seeing on the STAS are the one those are being reflected when the user logged in to the computer using AD credentials and we read the user logon event ( 4768 ) and show it under live users on STAS.

I would recommend you to logout from the computer and log back in again and see if the users started showing up on STAS

Make sure you followed the below KB article and all the pre requisite are completed

https://community.sophos.com/kb/en-us/123156

Regards,

AJ
Cancel
Vote Up 0 Vote Down

Cancel
0 ElvioOliveira Junior over 4 years ago in reply to FormerMember

Hi, i did all in article, but why only show one user "otiadmin" is my administrator.

Others users is still login in my AD but not show on STAS.

Why?
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to ElvioOliveira Junior

Hello ElvioOliveira Junior ,

Please have your users logged out and log back in again and wait for 2-3 minutes and refresh again to see live users.

Also Run a WMI test from your STAS to one of the end device and see if it gets successful? and let me know the finding

Regards,

AJ
Cancel
Vote Up 0 Vote Down

Cancel
0 ElvioOliveira Junior over 4 years ago in reply to FormerMember

I did but not show any others users, only otiadmin user.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago in reply to ElvioOliveira Junior

Hello ElvioOliveira Junior,

DO you have more than one domain controller in your environment ? Do you have STAS installed on your secondary domain controller ?

Regards,

AJ
Cancel
Vote Up 0 Vote Down

Cancel
0 KingChris over 4 years ago in reply to ElvioOliveira Junior

Hi ElvioOliveira Junior

That user that is showing, the admin user, is it running as a service account on your client computers?

If so you would need to add it into STAS under the "Exclusions" portion.

Thanks!

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 ElvioOliveira Junior over 4 years ago in reply to FormerMember

4 months ago I had a second domain controller, it was after I removed it that it was like this. I just remembered!
What should I do to solve it?
Cancel
Vote Up 0 Vote Down

Cancel
0 ElvioOliveira Junior over 4 years ago in reply to KingChris

Hi,
Cancel
Vote Up 0 Vote Down

Cancel
+1 FormerMember over 4 years ago in reply to ElvioOliveira Junior

Hello ElvioOliveira Junior,

Please change the user from running as service to one of your service account you wanted to use for STAS. Also make sure that you updated the same user under STAS application

NOTE: Make sure the account you are using for STAS have certain permissions to read the logon events from domain controller. For testing use admin account

Regads,

AJ
Cancel
Vote Up 0 Vote Down

Cancel
0 ElvioOliveira Junior over 4 years ago in reply to FormerMember

Hi, AJ i'll try.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ElvioOliveira Junior over 4 years ago in reply to FormerMember

Hi, AJ i'll try.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data