Submit a ticketCall us

Announcing NPM 12.2
With NPM 12.2 you can monitor your Cisco ASA firewalls, to monitor VPN tunnels for basic visibility and troubleshooting tunnels. NPM 12.2 also uses the SolarWinds Orion Installer so you can easily install and upgrade one or more Orion Platform products simultaneously.
See new features and improvements.

Home > Success Center > Log & Event Manager (LEM) > USB Defender alerts are missing user and source machine details

USB Defender alerts are missing user and source machine details

Created by Jason Dee, last modified by MindTouch on Jun 23, 2016

Views: 20 Votes: 0 Revisions: 3

Overview

This article describes the issue when USB Defender alert emails are missing certain details such as the  the source user account or source host.

Environment

All version of LEM 

Cause 

The USB mass storage devices are being plugged into the source machine before a user has actually logged in.

 

Resolution

Due to the nature of Windows logging, there isn't a solution for this scenario. If the device is plugged in prior to a user actually logging in, the Windows event will be generated at the moment the device is plugged leaving some details behind details.

 

Last modified
20:24, 22 Jun 2016

Tags

Classifications

Public