When User successfully authenticates via kerberos event id
540 is created but workstation name is not captured, I
have seen different articles on this being a problem but
have not seen any resolution, any help would be
appreciated.

Are you getting a source network address down at the bottom?

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm


"Robert Sobczak" wrote in message
news:069f01c39fcc$92af4290$a001280a@phx.gbl...
> When User successfully authenticates via kerberos event id
> 540 is created but workstation name is not captured, I
> have seen different articles on this being a problem but
> have not seen any resolution, any help would be
> appreciated.