Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using Logon Agent for Transparent User Identification > Configuring Logon Agent to ignore certain user names
Configuring Logon Agent to ignore certain user names
Using Logon Agent | Forcepoint Web Security and Forcepoint URL Filtering | 29-Apr-2022
The method that some services use to contact domain controllers from user machines can cause the users logged on to those machines to be misidentified. For example, problems can be caused by:
*
The internal user names (Local Service and Network Service) that Windows XP assigns for processes to use for communication with domain controllers
*
Running Systems Management Server (SMS) on a client machine.
To prevent or work around possible misidentification, configure your transparent identification agent to ignore logon names that are not associated with actual users.
1.
Stop the Websense Logon Agent service.
*
Windows: Use the Services tool.
*
Linux: Use the /opt/Websense/WebsenseDaemonControl command.
2.
Navigate to the bin directory (C:\Program Files\Websense\Web Security\bin or /opt/Websense/bin/, by default).
3.
Use a text editor to either create or open ignore.txt.
4.
Populate the file as follows. Place each entry on a separate line.
*
Add each user name that should be ignored on its own line. These users are ignored, regardless of which machine they use.
*
To add a user name/machine pair, enter the user name, followed by a comma, and then the machine host name or IP address (ypark,YPARK-WS1). In this case, the specified user is ignored only on the specified machine.
*
To add a machine, enter an asterisk (*), followed by a comma, followed by the machine host name, IP address, or IP address range.
The following example shows correctly formatted entries:
anonymous logon
admin,WKSTA-NAME
*, WKSTB-NAME
*, 10.209.34.56
*, 10.203.34.1-10.203.34.255
In this example, the Windows 7 service account anonymous logon is ignored on all machines, the user name admin is ignored only when associated with machine WKSTA-NAME, and logons for WKSTB-NAME, 10.209.34.56, and the network range 10.203.34.1 to 10.203.34.255 are ignored.
5.
When you are finished making changes, save and close the file.
6.
Start Logon Agent.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Using Logon Agent for Transparent User Identification > Configuring Logon Agent to ignore certain user names
Copyright 2022 Forcepoint. All rights reserved.