FSAE Users appear to be logged as guests

[#1]

Description

Users appearing as guests means that the FortiGate did not receive any information about the user.  This may be due to one of the following:

1. The DC agent is not installed on the DC used by these users. Check that the DC agent has been installed on all DC's.
2. The collector agent is unable to resolve the DNS name of the host. Check that the DNS server is able to resolve names on all monitored workstations.
3. The collector agent is configured not to send login events for these users.

In order to troubleshoot this type of scenario, the Fortinet TAC will ask for the following:

• Collector agent log file (information level)
• The following registry from all Domain Controllers: [HKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FSAE], and for 64bit machines include also [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Fortinet\FSAE].
• Output from the DOS prompt of the problem workstation:
       Echo %logonserver% ipconfig /all

• A list of the user names having the problem and the local time at which the issue occurred.