10-13-2019 08:56 PM
Hi ,
How to get actual reason when user ID got disabled and schedule report for the same to get it on e-mail ?
10-25-2019 02:38 AM
10-25-2019 03:38 AM
Hi,
In mine organization, randomly few users TACACS ID are getting disabled for which i need to generate a monthly report of list of user ID and cause for ID disablement.
Also i need that report to be sent periodically (monthly) to our mail ID.
> IDs are not expired or disabled due to multiple wrong attempts.
Hope this info is sufficient !
10-25-2019 03:54 AM
Are these IDs in internal databse or in AD ? you can capture the syslogs in an external log collector and check for failed authen tications. why IDs are disabled could be some setting in AD . If using ISE internal database, you could check the account expiration status. Or you can check the failed authentication report
Thanks,
Nidhi
10-25-2019 04:55 AM
We are using ISE internal data base.
Can i set any alert or mail whenever user ID got disabled and reason for the same?
I do checked authentication Failed report but its not helping out and i not able to schedule & sent report on mail.
thanks,
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: