Alerts (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager

Message

---

boden -> Alerts (9.May2008 8:22:30 AM) I have setup an alert to email me the description of a user being added to local groups on some our servers. However the Member ID is being returned as the SID in the email and in Events Browser. However the user name is displayed as the actual name in the Event viwer on the server. Is there any way of correcting this as it makes the alert unreadable. E.g. Security Enabled Local Group Member Removed: Member Name: - Member ID: {S-1-5-21-74776956-1042257946-1102305193-1046 Target Account Name: test Target Domain: MONITORLON2 Target Account ID: {S-1-5-21-74776956-1042257946-1102305193-1045 Many Thanks,

---

aniziyo -> RE: Alerts (27.Sep.2009 8:46:10 AM) Hi, I have the same issue here, I hope I find an answer for it : Security Enabled Local Group Member Added: Member Name: - Member ID: ANY\workshop The member Name is just a dash "-" how I can make it to be an user name.

---

DrewE -> RE: Alerts (28.Sep.2009 9:31:11 AM) What Operating system is GFI EventsManager installed on? What Operating system is the event being collected from? Also, is GFI EventsManager installed on the same domain as the domain the event is being retrieved from?

---

aniziyo -> RE: Alerts (29.Sep.2009 12:39:12 AM) thanks a lot for replaying. the GFI is installed on windows 2003 R2 Ent. SP2. the event is collected from Win2000-SP4, WinXP-SP2 & WinXP-SP3. but all of them has this issue. NO, the GFI is installed in separate server Joined to the domain, this server has only the GFI application and SQL2005 only. one thing, I'm collecting the event for changing the local administrators group only.

---

DrewE -> RE: Alerts (29.Sep.2009 8:01:09 AM) Can you open a support request at http://support.gfi.com/Support/support.aspx?lcode=en so we can better assist you?

---

Page: [1]