The short answer is YES, this is doable.  You'll very quickly become a SQL pro now that you're joining the NS side of the house.

How:

1. Clone the report by right-clicking on it.  Why?  All "canned" reports are read-only.  To avoid messing it up, you'd want to clone it anyway.  The cloned one will be editable.
2. on the Cloned report, click "Edit"  Here, you'll see all the SQL that is there.
3. Add the data you need.  If you don't know SQL, find someone who does, or start reading/researching online quick.  It's not too bad, generally, so have fun!!

If after doing this you find youself completely stuck, let us know!

Yes, I already cloned it and have been playing around with it.  I guess I'll continue to play around with it.  This is an example of why I don't play on the NS side of things.

Below is exactly what I'm looking for but it fails in 7.0. 

https://www-secure.symantec.com/connect/articles/a...

There is a problem though.  I looked at this report and it's doing a group by application.  If you're grouped by application, then you can't include user and group.  It's logically not possible.  Logically I said, not just realistically due to some sort of limiation in the product.

The most realistic way to take THIS report and include user/computer would be with a drill down.  That way, you could then have a report that says something like "all computers/users who had bittorrent denied them..." or something like that.  In the "summary" application report, you'd show 200 bittorrent denials, double-click that and find all the computers that were denied.

The only way to combine the two would be to have a report showing ALL denials from ALL computers and only sort by product.  That'd make for a potentially long list.

VComputer is the only thing you have to join to no matter what you want, but may I simply ask what it is you want to see in a report?  The link provided above has several views, several reports, an email...  Are you simply trying to reinvent the entire process, or looking for one aspect of it?  Is it something in particular Management wants?

Thanks!  :-)

Hi Thomas,

Ultimately, I'm just looking for a report that will showed denied events and then, like you say, a drill down to show me the computer number and the user.  I think this was the first option in the old article.  I still need to play around with this some more.  Some things came up this morning that prevented me from spending time on this....