000014093 - Logs not collected from Widows XP desktops/laptops if in the same domain as windows servers

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000014093
Applies ToenVision Core 4.0.0
2003 Server SP1
IssueLogs are not being collected from Widows XP desktops/laptops if they are in the same domain as Windows servers.
Resolution

Create two Windows domains, one for servers and the other one for XP workstationand laptops.    The best way to achieve this is to use the the standard FQDN for the servers account ie: example.com, with say username of server_admin and then create a second collection domain that uses the NETBIOS resolved name for the same Windows domain for the workstations ie: EXAMPLE with the username of workstation_admin.

You can refine it further by using $Domains and specifiying the fully qualified domain as part of the username eg: server_admin@example.com or example.com\server_admin. $Domains assume localhost for authentication, but the fully qualified username will force the local machine to authenticate via the domain controller.

Legacy Article IDa47772

Attachments

    Outcomes