Logon_event.log I have circa 1000 users daily. For some reason when
checking Logon_event.log, I can see my username on loads of the
workstations. This makes no sense to me. Other users are logged on these
devices. I am checking for a service that may...
I have 1 domain and 4 domain controllers. My Organisation is split over
2 sites but connected by a layer 2 link. Active Directory has 2 sites.
Default First Site and Second Site.I have an Internet connection at each
site. I have a Fortigate at each s...
This is essentially my issue
https://community.fortinet.com/t5/Support-Forum/FSSO-Collector-Agent-not-getting-catching-EVERY-user-logon-event/m-p/224699
I have circa 1000-1500 users daily, most will be ok but I will get a few
who are not being authen...
The reason for my username showing up everywhere was due to a service
(PDQ inventory) that was running as my account, this was connecting to
workstations and generating logon events which confused FSSO. I changed
this account to a service account and...
well everyone The issue has now been resolved. It was a combination of
the following. After upgrading my Active Directory Servers, DNS
scavenging was not turned back on so IP addresses were not resolving to
the correct DNS names (vice versa). I turne...
Thanks, I have enabled all the logs now and I am using them to help
diagnose. You are right about DNS. I upgraded my AD domain controllers
and DNS scavenging was not turned on which caused issues with the
workstation look up etc. However, I still hav...
It is a single Active Directory domain with two 'sites' within AD Sites
and Services. Logon events are generated in their respective domain
controllers.For example. In Site 1 (Default First Site), anyone on those
subnets will have their logon event g...
