3 replies to this topic

[williamcheang]

Hi Team,

Can we monitor Service Account logon activity which the service account is defined in services.msc services ?

 

Can we monitor Success or Failure Event on these service accounts ?

 

Customer want to track the Success/Failure logon activity is coming from workstation.

 

 

regards,

William

[Lain]

Hi William,

 

Audit of Logon Activity is available starting from the Netwrix Auditor version 8.0. It is capable of capturing successful and failed logon attempts in the domain. More information is available here - https://www.netwrix...._in_domain.html

 

To start monitoring Logon Activity you need to create a new Monitoring Plan  or Monitored Object with the Logon Activity Data Source and configure your environment according to this guide - https://helpcenter.n...astructure.html

 

Best,

Alex

[mhudson]

I have about 90 service accounts, how can I tell Netwrix which accounts to monitor? Can I upload a list? Or can it be done by a group?

[williamcheang]

As i know, monitoring Logon activity is based specifying the AD Domain. U can't specify based on Logon ID.