[FSSO] - Users disappear from logon users list

Forum|Forum|7 years ago
September 7, 2018
1 reply
11086 views

Hi,

I have a number of users who build local VMs on their on Workstations.

They use Hyper-V and build W10 VMs which are joined to the domain.

When they RDP / Login directly through the console to the VM, everything is fine and I can see the user in FSSO Collector with the correct IP but few minutes later the user disappears from Logon users list.

I enabled Debug Logging and I noticed this WMI check failure which I believe is the main culprit.

09/05/2018 11:45:51 [ 2880] wksta_check_wmi: cannot get UserName, error code:0x0 09/05/2018 11:45:51 [ 2880] wksta_check: user:domain\user1 is no longer logged on to workstation.domain.com (172.17.1.2) 09/05/2018 11:45:51 [ 2880] after workstation checking: workstation.domain.com

All VMs built are W10 and WMI checks are supported + the account which runs FSSO Collector Service is Domain Admin with Full access to all Workstations.

I was also thinking to disable WMI checks but the feature is useful and I wonder what impact will have on logoff checks.

Any advice please?

Fortigate Firmware: 5.4.4,build1117

FSSO Collector: 5.0.0254

Upgrade is not an option for us at this point in time.

kctesting77Author

New Member

Just to mention that I can access remotely the WMI Control for the VMs from the Server where FSSO Collector is installed with the account which is running FSSO Collector.