Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > User Device Tracker (UDT) > UDT Administrator Guide > Troubleshooting > UDT is not receiving user data from domain controllers

UDT is not receiving user data from domain controllers

Created by Steven Bansil_ret, last modified by Steven Bansil_ret on Feb 02, 2017

Views: 36 Votes: 0 Revisions: 2

Issue

UDT credentials are managing relevant domain controllers and the credentials for accessing them are valid but AD polling is not working.

Solution

In some cases, this problem has been traced to the wrong event codes being generated on the domain controller(s). UDT cannot display any user related data without event codes 4768/4769 and without a result code of 0x0. Any other event or result codes result in UDT ignoring the log data.

Event code setup

Use Group Policy Manager to review and edit the default local policy on the domain controller(s). Check that the Audit account logon events policy is enabled on the domain controller.

 
Last modified
23:54, 1 Feb 2017

Tags

Classifications

Public