Users appearing as guests means that the FortiGate did not receive any information about the user. This may be due to one of the following:
- The DC agent is not installed on the DC used by these users. Check that the DC agent has been installed on all DC's.
- The collector agent is unable to resolve the DNS name of the host. Check that the DNS server is able to resolve names on all monitored workstations.
- The collector agent is configured not to send login events for these users.
In order to troubleshoot this type of scenario, the Fortinet TAC will ask for the following: