Tracking Anyconnect Users

[Zinko]

Person A remotes into person B's computer and uses A's VPN credentials to establish a tunnel then ends the remote session without disconnecting the VPN. Person B then accesses network/mapped drives. Will the activity within those drives be logged under person A or person B? Keep in mind person B is the windows user.

[Milos_Jovanovic]

Hi @Zinko,

I believe this must be logged by person B.

AFAIK, network drives are user-based. Just because you used person A credentials to establish VPN, person A is not used anymore anywhere. Person B is using already established tunnel to access its drives, and will use its own credentials to authenticate to those.

BR,

Milos