Submit a ticketCall us

Welcome to the NEW Success Center. Search all resources (documentation, videos, training, knowledge base articles) or browse resources by product. If you are unable to find what you are looking for, please contact us at customersuccess@solarwinds.com

 

 

 

 

Home > Success Center > Log & Event Manager (LEM) > USB Defender alerts are missing user and source machine details

USB Defender alerts are missing user and source machine details

Created by Jason Dee, last modified by MindTouch on Jun 23, 2016

Views: 730 Votes: 0 Revisions: 3

Overview

This article describes the issue when USB Defender alert emails are missing certain details such as the  the source user account or source host.

Environment

All version of LEM 

Cause 

The USB mass storage devices are being plugged into the source machine before a user has actually logged in.

 

Resolution

Due to the nature of Windows logging, there isn't a solution for this scenario. If the device is plugged in prior to a user actually logging in, the Windows event will be generated at the moment the device is plugged leaving some details behind details.

 

Last modified
20:24, 22 Jun 2016

Tags

Classifications

Public