USER-ID Agentless change its browsing methode?

[Gregoux]

Hello

I was a little surprise when I configured a user-id with active directory monitoring

I defined a specific user with all the right needed on the active directory like

user is part of the Distributed COM Users, Server Operators and Event Log Readers groups

the windows active directory is base on WIN2008 R2 only Event Log Readers groups is needed

but the result was the paloalto was not connected to the AD controler

and I looking for a while until I try to activave the WMI probing

I execute Run wmimgmt.msc (on the domain controller server) on the command prompt to open the console and modify the  properties

Select the Security tab of the WMI Control Properties and drill down to the CIMV2 folder. Select this folder and click the Security button. Add the service account

and check off both Enable Account and Remote Enable.

as describe their:

PANOS 5.0 User-ID Installation and configuration including integration guide with Microsoft NPS

In fact I have used this fonctionnality  for a while with admin account. and everything works

now I can used another kind of user but with wmi right access.