<div>
<div class="content wysiwyg-content">
Dear Supporters,<br />
we use XIRRUS and PaloAlto at customer site and have to install an agent that reports the successfully logged on users to PaloAlto.<br />
<br />
By now, the users (students) connect to WiFi with Radius Authentication and have to enter the same credentials at a captive portal from PaloAlto to get access to internet.<br />
We want to get rid of this &quot;feature&quot; and want to use the PaloAlto User Agent.<br />
<br />
In Event Viewer we found at NPS-Log &quot;Microsoft Windows security&quot; Event ID 6278 which reports that a user access got granted.<br />
<br />
Is there a way to get the IP adress of the client?<br />
<br />
Is there an Event for successfully authenticated wired clients?<br />
<br />
Not all of our users use WiFi to connect, many are still connected by cable and we want to grant them access to internet by logging in at Windows Logon on their desktop (domain member).<br />
On the DC there must be an event which reports that a users with this IP was successfully logged on...isn't it?<br />
<br />
Please help me to find this IDs.<br />
<br />
Thanks.<br />
<br />
Lukas
</div>
</div>


Dear Supporters,
we use XIRRUS and PaloAlto at customer site and have to install an agent that reports the successfully logged on users to PaloAlto.

By now, the users (students) connect to WiFi with Radius Authentication and have to enter the same credentials at a captive portal from PaloAlto to get access to internet.
We want to get rid of this "feature" and want to use the PaloAlto User Agent.

In Event Viewer we found at NPS-Log "Microsoft Windows security" Event ID 6278 which reports that a user access got granted.

Is there a way to get the IP adress of the client?

Is there an Event for successfully authenticated wired clients?

Not all of our users use WiFi to connect, many are still connected by cable and we want to grant them access to internet by logging in at Windows Logon on their desktop (domain member).
On the DC there must be an event which reports that a users with this IP was successfully logged on...isn't it?

Please help me to find this IDs.

Thanks.

Lukas

Event ID for Login on DC at Windows Client Logon

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.