cancel
Showing results for 
Search instead for 
Did you mean: 

EPO 5.3 "USER NAME" and "USER" Field Displays N/A for some Systems

Good morning folks,

Has anyone experienced this problem where "USER NAME" and "USER" fields displays N/A for some systems?

How does the agent get the information from the system to then report back to EPO?

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator\Agent\LoggedOnUser

Displays Null on the systems that show N/A

Any help will be greatly appreciated.

Thank you

4 Replies

Re: EPO 5.3 "USER NAME" and "USER" Field Displays N/A for some Systems

,

                   Moved to (ePO) > Discussions for better assistance

Cliff

Moderator

Cliff
McAfee Volunteer

Re: EPO 5.3 "USER NAME" and "USER" Field Displays N/A for some Systems


Some of the users do show the correct user name under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator\Agent\LoggedOnUser but it still does not display in EPO.  There is communications with EPO and the GUIDs are not duplicated

mmcgary
Level 12
Report Inappropriate Content
Message 4 of 5

Re: EPO 5.3 "USER NAME" and "USER" Field Displays N/A for some Systems

This info is a little outdated but I think it may still apply:

Cause
The following operating system registry hive is not present on the affected clients:


HKEY_CLASSES_ROOT\Interface\{D597BAB3-5B9F-11D1-8DD2-00AA004ABD5E}


This key is used by the Microsoft System Event Notification Service to generate subscriber events for the log on and log off functions and provide those to the McAfee Agent. Agent versions up to 4.5 did not use this method to obtain Log on and Log off events from the operating system.

Solution(s)
Solution

Import the missing registry key on to the affected clients. Run the McAfee SuperDat, SETUP_ImportRegFile.exe, (attached to this article as a .zip file) on the affected computers to assist in automating the import of the following registry keys:

HKEY_CLASSES_ROOT\Interface\{D597BAB3-5B9F-11D1-8DD2-00AA004ABD5E}
@="ISensLogon"

HKEY_CLASSES_ROOT\Interface\{D597BAB3-5B9F-11D1-8DD2-00AA004ABD5E}\ProxyStubClsid
@="{00020424-0000-0000-C000-000000000046}"

HKEY_CLASSES_ROOT\Interface\{D597BAB3-5B9F-11D1-8DD2-00AA004ABD5E}\ProxyStubClsid32
@="{00020424-0000-0000-C000-000000000046}"

HKEY_CLASSES_ROOT\Interface\{D597BAB3-5B9F-11D1-8DD2-00AA004ABD5E}\TypeLib
@="{D597DEED-5B9F-11D1-8DD2-00AA004ABD5E}"
"Version"="2.0"

You can run this XDAT manually with a user account that has administrative permissions, or deploy it via ePO. XDAT will work on:

  • Microsoft Windows
  • 32-bit (x86) and 64-bit (x64) systems

SETUP_ImportRegFile.zip:

https://kc.mcafee.com/resources/sites/MCAFEE/content/staging/CORP_KNOWLEDGEBASE/69000/KB69251/en_US/...

Re: EPO 5.3 "USER NAME" and "USER" Field Displays N/A for some Systems


Thanks for the response!

Let me try this and see if this solves the issue.

Thank you