Return
-
Title
Workstation logon agent not reporting for any devices outside of Active Administrator server subnet -
Description
The Workstation Logon agent is deployed to machines in different subnets, but we are only getting reporting on those systems within the same subnet as the AA server. -
Resolution
Confirm there are no firewalls blocking communication between the workstations and the AA server over port 15601. Ensure the AA server is listening on port 15601 and the workstations can connect to the server on that port.
Ensure that the AA server and all of the workstations have a PTR record in DNS. If PTR records are missing, create the records and remove and reinstall the Workstation Logon Audit agents.
Confirm the Workstation Logon Agents have been deployed properly by reviewing the following KB articles:
https://support.quest.com/active-administrator/kb/4237047/how-to-verify-the-workstation-logon-audit-agent-has-been-successfully-deployed-using-a-gpohttps://support.quest.com/active-administrator/kb/4316446/user-logon-activity-not-capturing-data-for-a-specific-workstation
-
Defect ID
Bug 11524