user-id user name issue

[Venkatesan_radhakrishnan]

Hi Team,

I'm getting NETBIOS name instead of domain name. How to resolve this issue

Regards

Venky

[Venkatesan_radhakrishnan]

Hi Guys,

Anyone faced similar issue.

Regards

Venky

[MP18]

No never saw this issue.

Please check your config

[SteveCantwell]

This information is coming from the DC, so the question could be "Why is the DC sending me logs with NetBios vs the domain?"

[MP18]

Check with server team.

There might be some settings or config on server that need to be fixed

[Venkatesan_radhakrishnan]

Hi Team,

I Couldn't able to find any issue in server, usually when user logs in to system. I'm seeing domain name in monitoring logs of UIA.

Once after user locks windows 7 and unlock it get changed to netbios name (administrator@domain.local).

Regards

Venky

[SteveCantwell]

Hi Venky

The FW receives logs from the DC, when a user logs in/ logs out, or any update that happens at the 90 minute mark (Group Policy)

Knowing that the FW is receiving this NetBios name from the DC is why I initially asked why this was occuring.

Is the domain name and the NetBios name the same?

I have seen companies have a domain name like company-name.ext, but the NetBios name is company.local. (notice the extensions of the 2 example are not the same).   The DC will log this information as such, so whent the UID queries, the FW retrieves both listings.  

I do not believe it is a FW misconfiguration, but I will look to see if there are any settings to assist you.