Disable logon attempts from the account service is running as
We are using Eventsmanager to collect event logs etc from a server located in a DMZ, which is out of reach from domain controllers. This prevents the account under which GFI Eventsmanager service is running to log on to this server. We have specified another set of credentials in the Event Source properties. However, the service still tries to log on to this server as the domain account that the EM service is running ...more »
We are using Eventsmanager to collect event logs etc from a server located in a DMZ, which is out of reach from domain controllers. This prevents the account under which GFI Eventsmanager service is running to log on to this server. We have specified another set of credentials in the Event Source properties.
However, the service still tries to log on to this server as the domain account that the EM service is running under in addition to the credentials supplied in said properties. This generates 36 failed logon attempts per hour on a production server, which triggers some other alarms.
It would be beneficial that the service only tries to log on using the credentials specified on an Event Source when they differ from the account under which the Eventsmanager service is running.
« less full details »
