A
A
Anton2016-04-06 02:45:44
Active Directory
Anton, 2016-04-06 02:45:44

Why is the computer name not displayed in event 4624 in AD?

Good afternoon everyone
I would like to make a system for matching users to computers and their ip-addresses. It is very convenient to do this according to information from the security audit (event 4624) of the domain controller, but that's bad luck - nothing is written in the "workstation name" field. Although this information is present in events 4625.
Tell me, maybe someone knows how to solve the problem with event 4624 or maybe someone has other thoughts about matching the computer name and user (do not offer local batch files, since the user can log in from a non-domain machine, and this must be fixed)

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question