cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cdobol
Level 10
Report Inappropriate Content
Message 1 of 7

EEPC 7.0 User Audit

This may be a silly question, but I can't find an easy way through the ePO console to report user events (logon).   The EEPC user field does not appear to be a queryable within the ePO GUI.  Am I missing something or do I have to go directly against SQL to get this information?

6 Replies
jmcleish
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 2 of 7

Re: EEPC 7.0 User Audit

Do you have the EE: Product Client Events query - if so you can filter the logon events for EventID= 30000 and add the user name column from the computer properties category.

HTH

cdobol
Level 10
Report Inappropriate Content
Message 3 of 7

Re: EEPC 7.0 User Audit

That's close - but I would rather pull the actual EEPC user.... but this should work for now.  Thanks.

cdobol
Level 10
Report Inappropriate Content
Message 4 of 7

Re: EEPC 7.0 User Audit

Another related question.  Is there a way to report on all user assignments?  As of now I have to go in Data Protection.. EEPC Users.... select a machine then view users.   It would be nice if I could report on user assignments for all machines.

jmcleish
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 5 of 7

Re: EEPC 7.0 User Audit

There should be another query- "Endpoint Encryption - System Users for Each Machine" which should show them all for each amchien.  Make sure you have UserName (EE) in the column.

HTH

Jane

cdobol
Level 10
Report Inappropriate Content
Message 6 of 7

Re: EEPC 7.0 User Audit

I do not appear to have that query.  I am running extension version 7.0.0.311.  Should that query be included with this extension version?

jmcleish
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 7 of 7

Re: EEPC 7.0 User Audit

To be honest, I can't remember if that is a default one or one i created.

But you can create it-

New query-

Endpoint Encryption - Endpoint Encryption - System Users

configure type- list table (sort by System Name)

 

add columns

system name, User Name (EE), last communication

If you have epo v4.5 ican export the query definition if you want but those instructions should do the trick.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community