Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 823 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS Problem

Farzan Barouj

Hi everyone, I have 3 domain controllers on my network.
I installed STAS on the three domains.
DC1: STAS >> Agent for (DC2 and DC3) and Collector
DC2: STAS >> Agent for (DC1 and DC3) and Collector
DC3: STAS >> Agent for (DC2 and DC1) and Collector

On Sophos I only created one collector group and then the three domains in the order listed below.
Collector 1 >> DC1 >> Collector group 1
Collector 2 >> DC2 >> Collector group 1
Collector 3 >> DC3 >> Collector group 1

I sometimes hear from my users that they cannot go on the internet.
The cause is not clear to me.
I checked the DCs event logs.
The event ID 4768 was generated. But STAS could not recognize or identify the user as an online user.
What could be the problem?

I am thankful for any help.



This thread was automatically locked due to age.

Top Replies

  • in reply to Farzan Barouj +1 suggested

    you're in the right place then, it's something to do with DC/event logs and STAS agent not picking up the event. Double check you have auditing turned on for Audit Account Logon Events and Audit Logon Events. If that all checks out, reinstall STAS.

    Jump to answer