Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 6642 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

STAS authenticated users disappear

JensStraten

I have configured STAS and it is tracking users when they logon (or reconnect). However, when a user is connected for a longer period of time, the user is no longer shown as a live user. I was hoping that STAS would show me what users are online for the life time of their session.

Did I miss a setting somewhere?

Thanks,

Jens



This thread was automatically locked due to age.
  • 0

    I never seen this behaviour. STAS uses logon/logoff events so if the user does not logoff, the user is still "live" for XG.

    Do you have any log or interesting screenshot?

    Thanks

  • +1 in reply to lferrara

    I tracked this down to two issues:

    1. I somehow missed to enter a value for "Display Name Attribute" while setting up the AD authentication server.

    2. Even though I thought I set it up, I found that "Security Event Logging" on the AD server was not enabled.

     

    These oversights prevented domain users from being created and it also limited logging.

    Anyhow, I will do some more testing, but it seems to be working now.

    Cheers,

    Jens

  • 0 in reply to JensStraten

    After doing some more testing, I sadly found more issues.

    It seems that my server (Windows 2016 Server) cannot use WMI to reach Windows 10 clients. It is giving me an access denied error message. I already checked the firewall on both machines, but it doesn't seem to block it (I simply disabled it for testing and it still shows access denied).