Alright experts, I need some assistance because this isn't making a lick of sense. I have a customer running FMC 6.2.2 and AD User Agent 2.3 that is having an issue where a lot of their connection events are showing Unkown under Initiator User. Some users show their AD accounts but most do not. The site is not using a proxy server and from my understanding this was working previously before the AD admin changed the rights of the user that was configured for the AD User Agent. He configured the user according to this document:
https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118637-configure-firesight-00.html
As it sits, I'm going to see if we can test with an AD domain admin account just to see if it produces the same result. I'm wondering if any of you have seen this behavior?
