Some AD users resolving / Some AD users not

Reply
Highlighted
Not applicable

Some AD users resolving / Some AD users not

Im not seeing all my AD users in the PA-2020.  Ive installed the agent - all connected and seems to be fine with no errors but I seem to be missing about 30 of my AD users.  Its a single flat AD.  Ive added all the domain controllers / the agent runs with rights to read the lgs... 

V3.15

V3.1.1 Agent

Where do I start to look?

Tags (2)
Highlighted
Not applicable

-) Is the agent service started?

-) Check the logs on the agent host for errors

-) Do a "check/display" users within the agent interface to see all the user's that the agent has identified

-) Make sure you're filtering the appropriate AD groups if needed

-) Check the logs on your PA unit and make sure that it is "connected" to the agent

-) How long has the agent been running?  From my own experience, it does take some time for it to parse the DC logs and scan for logged in users.

-) How many DC's are in your network?  Do you have all the DC's coded by IP in the agent config to be scanned?

Tariq

Highlighted
L3 Networker

Pan Agent relies upon Windows Logon events in the Security Event log on the Domain Controller(s). Have you verified that these missing users are showing up in the DC Security Event log?

Have you enabled a higher level of logging in the Pan Agent? (File menu -> Debug -> Verbose)

If these users are creating logon events in the DC Security Event log are you seeing any errors in the Pan Agent log file?

Highlighted
Not applicable

It was a complex mix of AD versions - loaded another agent and all is working!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!