Jump to content


Photo

Domain Service Account Logon activity

service account logon activity

  • Please log in to reply
3 replies to this topic

#1 williamcheang

williamcheang

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 09 July 2018 - 03:13 AM

Hi Team,

Can we monitor Service Account logon activity which the service account is defined in services.msc services ?

 

Can we monitor Success or Failure Event on these service accounts ?

 

Customer want to track the Success/Failure logon activity is coming from workstation.

 

 

regards,

William



#2 Lain

Lain

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 10 July 2018 - 07:09 PM

Hi William,

 

Audit of Logon Activity is available starting from the Netwrix Auditor version 8.0. It is capable of capturing successful and failed logon attempts in the domain. More information is available here - https://www.netwrix...._in_domain.html

 

To start monitoring Logon Activity you need to create a new Monitoring Plan  or Monitored Object with the Logon Activity Data Source and configure your environment according to this guide - https://helpcenter.n...astructure.html

 

Best,

Alex



#3 mhudson

mhudson

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 18 July 2018 - 04:55 PM

I have about 90 service accounts, how can I tell Netwrix which accounts to monitor? Can I upload a list? Or can it be done by a group?



#4 williamcheang

williamcheang

    Newbie

  • Members
  • Pip
  • 9 posts

Posted Yesterday, 07:04 AM

As i know, monitoring Logon activity is based specifying the AD Domain. U can't specify based on Logon ID.






0 user(s) are reading this topic

0 members, guests, anonymous users