Why is the User-ID agent not ignoring the users listed in the ignore_user_list.txt?
12171
Created On 06/12/19 21:32 PM - Last Modified 08/04/21 22:43 PM
Question
Why is the User-ID agent not ignoring the users listed in the ignore_user_list.txt?
Environment
- PAN-OS
- User-ID
- Created ignore_user_list.txt and placed in the directory where User-ID Agent is installed
- Added user johnny to be ignored from User-ID as below
johnny smithcompany\johnny
Answer
User-ID Agent was pulling the user in userPrincipalName format and only sAMAccountName and Username format was added to ignore_user_list.txt and therefore was not matching from the list and being ignored.
- If you have a mix of users in UPN and sAMAccountName format, then make sure that the listing of those users in the ignore_user_list.txt matches how the User-ID Agent is pulling each user.
Additional Information
How to Ignore Users in User-ID
See Step 6 from Configure the Windows User-ID Agent for User Mapping