What's covered
Overview
Configure User Logon Inventory Policy
Configure Default Update Primary User for Collection Task
View Primary User
Manually Override the Primary User
OverviewLocal Security Solution (LSS) can track user logons in order to determine the primary user for each machine. The primary user of a computer is the user who is logged in the most. Using Application Control Solution, you can target Thycotic Local Security Agent collects logon and logoff events and reports them as inventory data. The Default Update Primary User for Collection task calculates the primary user on AMS. The primary user and associated inventory data can then be viewed in Resource Manager.
Configure user logon inventory policyThe Thycotic Local Security Agent collects logon and logoff events from windows on a schedule configured via the User logon inventory policy.
- Open the Policies tab in the Arellia Security Manager console.
- In the policies tree navigate to Policies > Thycotic Solutions > Local Security > Policies > User Logon Inventory Policy.
- Configure the schedule and the targeted computers and click Save.
Image Added
Tip |
---|
You can collect logon events immediately by running the Collect Windows Logon Events which you can find in the Tasks tab, Jobs And Tasks section, navigate to Jobs and Tasks > Client Tasks > Local Security > Collect Windows Logon Events. |
top
Configure default update primary user for collection task The default update primary user for collection task calculates the primary user on a schedule from inventory data.
- Open the Tasks tab in the Thycotic Security Manager console.
- Open the Jobs and Tasks section on the left.
- Navigate to Jobs and Tasks > Server Tasks > Local Security > Default Update Primary User for Collection.
- Configure the settings and schedule and click Save.
Image Added
Tip |
---|
You can run the Update Primary User task at any time to immediately recalculate the primary user for all computers in the selected collection. |
top
View primary userUsing LSS, you can view a computer on your network and find out who the primary user is by doing the following steps:
- In the Thycotic Security Manager Console, click Resources.
- In the file library in the left pane, navigate to Default > All Resources > Asset > Network Resource > Computer.
Image Added - In the right pane, right-click a computer and then click Show Primary User.
In Resource Explorer
In the Resource Explorer in the upper left corner, the Primary User is included with the computer information.
Image Added
top
Manually override the primary userYou can manually override the Primary User of a computer by doing the following steps:
- In the Resource Explorer in the lower left corner under Actions, click Show Primary User.
Image Added - In the Computer Primary User dialog box, select the Override checkbox.
- Click the Select... link.
- In the Select Resource dialog box, double-click the name you want to be listed as the primary user.
- In the Computer Primary User dialog box, click okay.
Image Added
top