Technical Tip: FSSO CA does not display Workstation name
| Description | This article describes how to have the FSSO CA display the workstation name. |
| Scope | FSSO CA. |
| Solution | The FSSO CA will show the logon users:
In the above capture shows the Workstation as IP address instead of the hostname. Check the FSSO CA Advanced settings, General tab, the setting 'Event IDs to poll:' and change it to 1 or 2.
The Workstation should display the hostname of the workstation once a re-login event occurs.
This happens because if the authentication is Kerberos, event ID 4624 will not contain the workstation name, but will only contain the workstation IP - and since FSSO CA does not perform reverse lookups, the workstation name in 'Logon users list' will have the IP address instead of the workstation name.
In order to have the workstation name, other events should also be taken into account (for example, Event ID 4768 and 4769), which are polled when setting the events to poll to 1 or 2.
Related article: Technical Tip: Windows event IDs used by FSSO in WinSec polling mode |
