What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Active directory integation

Votes:

0

We have a PRTG installation that is integrated with our Active Directory. Most users can log in successfully but 2 accounts that were working, where locked out on AD. The 1 is now working fine after the hour poll but the other one is not working. I have cleared the cache which has not fixed the issue. We are using an explicit account to for the AD integration that as all the correct rights, seeing the other uses can log in successfully. Do you have any other suggestions? We are using PRTG Network Monitor 14.3.10.2422+.

active-directory failed-logins prtg

Created on Dec 3, 2015 11:26:58 AM



1 Reply

Votes:

0

So I found out what the problem is after all. The user that could still log in, was in more than one AD group linked to PRTG, the user that could not access the site was in only one group. The non-working AD group was renamed without the new name being updated in the PRTG setup. What is strange is that the group was renamed about 2 weeks before the issue took place. So it seems that the user who lost access was able to continue to use PRTG after the AD group was renamed, but once the account was locked, PRTG was then not able to re-authenticate correctly after that. This also means that the AD group is linked to PRTG on the name alone and not using the SID. Not forgetting that we are using 14.3... which is 1 major release number behind current and this could very well have been resolved already.

So the real lesson learned here is, if you have some AD accounts working and some not. Clear the PRTG cache first and if that does not work, make 100% that the groups are correct in AD. Then ensure that the PRTG groups are linked correctly to those groups.

Created on Dec 3, 2015 3:10:01 PM




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.