Windows UserID agent runs on a separate server

mohammedsalhis — Thu, 16 Feb 2023 20:40:53 GMT

Hello Team,

Is it recommended to install the User-ID agent on a separate Windows server because the User-ID agent is not allowed to be installed on DC servers?
can we use two separate servers in this case?

Thank You

Re: Windows UserID agent runs on a separate server

kiwi — Fri, 17 Feb 2023 16:25:45 GMT

Hi @mohammedsalhis ,

Make sure the system that will host the User-ID agent is a member of the same domain as the servers it will monitor. As a best practice, install the User-ID agent close to the servers it will be monitoring. To ensure the most comprehensive mapping of users, you must monitor all domain controllers that process authentication for users you want to map. You might need to install multiple User-ID agents to efficiently monitor all of your resources.

Please check the following DOC for all the details:

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/user-id/map-ip-addresses-to-users/configure-user-mapping-using-the-windows-user-id-agent/install-the-windows-based-user-id-agent

Kind regards,

-Kiwi.

topic Windows UserID agent runs on a separate server in General Topics

Windows UserID agent runs on a separate server

Re: Windows UserID agent runs on a separate server