04-15-2019 06:02 AM
Hey Guys
We have noticed a weird behaviour:
When I do a telnet to IP 1.1.1.1 Port 445 on our Terminal Server with the TS Agent installed, the associated Port Range will be used as expected and the source user-id will be mapped.
But when we do a net use in the same CMD window, it won't associate it with the expected port range but with a higher, not related to the users one and won't map the user-id. Both connections are Port 445 (checked in the logs).
I found this article online regarding that system context actions can't be mapped:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkCCAS
Anyone has/had the same issue? Can it be that net use is running in system context and can't be tracked?
Thanks and best regards
