This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS Live Users shows mostly Administrator username instead of actual logged on users

Hi all,

I have been monitoring the Live Users on the STAS collector for logged in users.

Here's my issue:

When a user first logs on, his username along with the other relevant details appear, but after a few minutes his username appears as Administrator but his IP still remains there.

As I'm enforcing a firewall rule based on AD users (in my case, blocking certain users from accessing the internet), when the user's actual username appears in the Live Users list, his connection drops. However after a few minutes, once his username stops appearing in the Live Users list, his connection comes back up.

How do I go about this issue?

Appreciate your help on this. Thanks.

Charlton

This thread was automatically locked due to age.

0 CMR over 7 years ago

This is probably due to a service running as administrator. Easiest solution is to add the administrator account to the exclusions list on the STAS agent running on the DC. Otherwise you can try the authentication client on each PC
Cancel
Vote Up 0 Vote Down

Cancel
0 Aditya Patel over 7 years ago

HI Charlton,

As suggested by Charles , you would need to add the account in exclusion list on STAS itself.

Regards,

Aditya Patel
Global Escalation Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel