Endpoint Protection

Bonjour,

Est ce qu'il ya une possibilté de voir depuis la console Symantec endpoint de quel groupe local du poste client appartien l'utilisateur logué.

Salutations.

You can have to export the computer status report from logs in excel then merge it and divide it as your requirement

Monitior - Log Type - Computer Status

See Sql query and SebastianZ below articles

https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database

SEP Client Information Query. Query result shows:
♦ SEP Computer name
♦ Installed SEP Version
♦ AV definition revision with the timestamp of the last update
♦ Assignement to SEPM Group
♦ Operating System
♦ Logged-on User
♦ MAC address
♦ IP address

select i.COMPUTER_NAME
, AGENT_VERSION
, pat.version as AV_REVISION
, dateadd(s,convert(bigint,LAST_UPDATE_TIME)/1000,'01-01-1970 00:00:00') LASTUPDATETIME
, g.name as GROUP_NAME
, i.OPERATION_SYSTEM
, i.CURRENT_LOGIN_USER
, i.MAC_addr1 "MAC Address"
, IP_ADDR1_TEXT "IP Address"
, i.DELETED "Marked for deletion"
from sem_agent as sa with (nolock) left outer join pattern pat on sa.pattern_idx=pat.pattern_idx
inner join v_sem_computer i on i.computer_id=sa.computer_id
inner join identity_map g on g.id=sa.group_id
inner join identity_map p on p.id=sa.last_server_id
inner join identity_map s on s.id=sa.domain_id
inner join identity_map q on q.id=sa.last_site_id
where
(sa.agent_type='105' or sa.agent_type='151') and sa.deleted='0' and I.DELETED = 0
order by group_name, operation_system, i.COMPUTER_name

Yes. Login and go to the Clients page. Select Search clients under Tasks.

In the Search Field select computer name. Once the PC shows up, double click it and on the General tab you will see the Logon User Name field. This will give you what you need.