Notification

Icon
Error

Active Directory Groups not scanned properly

Posted: Wednesday, July 28, 2021 4:30:55 PM(UTC)
SCH

SCH

Member Original PosterPosts: 3
0
Like
Hi I have problem with scanning Active Directory Groups which are associated to AD users. I made some changes recently and do not see added AD Groups in AD USER card. I can see old AD Groups to which AD USER belongs but not the new ones.

Does anybody has the same problem?

I experienced this after 8.4.20.2 update. Today I updated to most recent version but problem still occurs.

Notes:

1)I do not see new added AD Groups in ADObjectID table.
2)Attached detail of AD Groups from AD for user
3)Attached detail of scanned AD Groups in lansweeper
4)Scans are performed properly, because when I change OU of the user in AD I can see the change in user details in lanweeper, just AD Groups of the user do not refresh / update.
SCH attached the following image(s):
ad_detail.PNG
ls_detail.PNG
cross_eur
#1cross_eur Member Posts: 11  
posted: 7/28/2021 5:45:00 PM(UTC)
I had a similar problem, and I had to redelegate permissions for the Lansweeper account on the user OUs. Once done, evertyhing came back to normal.
SCH
#2SCH Member Original PosterPosts: 3  
posted: 7/29/2021 6:02:20 AM(UTC)
Originally Posted by: cross_eur Go to Quoted Post
I had a similar problem, and I had to redelegate permissions for the Lansweeper account on the user OUs. Once done, evertyhing came back to normal.


Hello. Do not understand. Scanning of user OUs is done with global settings or additional credentials. I thought (and it worked) that global credentials should be OK (it needs only AD read permission) and no other access is required. Actually I do not know how to redelegate permission on the user OUs.

Could you please explain.

Thanks
SCH
#3SCH Member Original PosterPosts: 3  
posted: 7/29/2021 7:10:23 AM(UTC)
Originally Posted by: SCH Go to Quoted Post
Originally Posted by: cross_eur Go to Quoted Post
I had a similar problem, and I had to redelegate permissions for the Lansweeper account on the user OUs. Once done, evertyhing came back to normal.


Hello. Do not understand. Scanning of user OUs is done with global settings or additional credentials. I thought (and it worked) that global credentials should be OK (it needs only AD read permission) and no other access is required. Actually I do not know how to redelegate permission on the user OUs.

Could you please explain.

Thanks


Already understood. Everythings works now. Problem was, that we selected only particular OUs (where users are located) to be scanned and did not selected OUs (where list of AD Groups are located).

We just added scanning target, new AD Groups were added and User details shows everything.

Active Discussions

Lansweeper Chrome 95 Audit
by  Esben.D  
Go to last post Go to first unread
Last post: Yesterday at 11:14:31 AM(UTC)
Lansweeper Detecting and Reporting on Programs in Apps & Features
by  LANGuy  
Go to last post Go to first unread
Last post: 10/18/2021 6:09:11 PM(UTC)
Lansweeper OS: Not latest Build of Windows 10 not working
by  jmm25   Go to last post Go to first unread
Last post: 10/18/2021 12:48:41 PM(UTC)
Lansweeper AD DistinguishedName of Computer object
by  elKastr0nom   Go to last post Go to first unread
Last post: 10/14/2021 6:52:50 PM(UTC)
Lansweeper Report if Credential Guard is active
by  ericatbrandmauer  
Go to last post Go to first unread
Last post: 10/14/2021 10:28:15 AM(UTC)