Table of Contents
Advertisement
By default, all of the DC Security Log options require a domain administrator account or local administrator
account on the domain controller to read the DC security log. The account information is entered during the
configuration, described in the following paragraphs. If an account with administrator privileges is not
available, user identification through the domain controller security log can be configured for WMI with a non-
administrator domain account.
User identification through the domain controller security log can also be configured by using WMI with a non-
administrator domain account. Although this option does not require use of the administrator domain account,
it still requires read access to the security log, which can be accomplished by configuring a non-admin account.
For more information, refer to the Configuring a Non-Admin Domain Account for SSO Agent to Read Domain
Security Logs configuration guide, available at:
https://support.software.dell.com/kb/sw9764
Windows Server uses the DC security log to record logon/logoff events and/or other security-related events
specified by the system's audit policy. If the audit policy is set to record log ins, a successful domain log in
records the user's user name and computer name in the security log. On Windows Server 2003 and above, the
computer's IP address is also logged.
To configure the DC Security Log method in Directory Services Connector:
1
In the Directory Connector Configuration Tool, right-click SonicWALL SSO Agent in the left panel.
2
Select Properties.
3
For the options above Query Source, see
27.
4
For Query Source, select one of the DC Security Log options from the drop-down list.
5
Select the Allow real time diagnostic checkbox to make the SSO Agent service send diagnostic messages
in real time.
6
For Event Polling Time, enter the number of seconds to use for the polling interval.
The Event Polling Time option is visible only if one of the DC Security Log options is selected in the query
source field. The SSO Agent fetches event logs from the domain controller on a regular time interval to
Configuring SSO Agent settings on Actions > Properties
Dell SonicWALL Directory Services Connector 3.7
on page
41
Administration Guide
Advertisement
Table of Contents
