topic Re: user-id user name issue in General Topics

user-id user name issue

Venkatesan_radhakrishnan — Tue, 27 Aug 2019 15:21:12 GMT

Hi Team,

I'm getting NETBIOS name instead of domain name. How to resolve this issue

Regards

Venky

Re: user-id user name issue

Venkatesan_radhakrishnan — Tue, 27 Aug 2019 16:47:28 GMT

Hi Guys,

Anyone faced similar issue.

Regards

Venky

Re: user-id user name issue

MP18 — Tue, 27 Aug 2019 16:59:48 GMT

No never saw this issue.

Please check your config

Re: user-id user name issue

S.Cantwell — Tue, 27 Aug 2019 18:54:15 GMT

This information is coming from the DC, so the question could be "Why is the DC sending me logs with NetBios vs the domain?"

Re: user-id user name issue

MP18 — Thu, 29 Aug 2019 00:50:24 GMT

Check with server team.

There might be some settings or config on server that need to be fixed

Re: user-id user name issue

Venkatesan_radhakrishnan — Thu, 29 Aug 2019 05:49:30 GMT

Hi Team,

I Couldn't able to find any issue in server, usually when user logs in to system. I'm seeing domain name in monitoring logs of UIA.

Once after user locks windows 7 and unlock it get changed to netbios name (administrator@domain.local).

Regards

Venky

Re: user-id user name issue

S.Cantwell — Thu, 29 Aug 2019 20:35:01 GMT

Hi Venky

The FW receives logs from the DC, when a user logs in/ logs out, or any update that happens at the 90 minute mark (Group Policy)

Knowing that the FW is receiving this NetBios name from the DC is why I initially asked why this was occuring.

Is the domain name and the NetBios name the same?

I have seen companies have a domain name like company-name.ext, but the NetBios name is company.local. (notice the extensions of the 2 example are not the same). The DC will log this information as such, so whent the UID queries, the FW retrieves both listings.

I do not believe it is a FW misconfiguration, but I will look to see if there are any settings to assist you.