Endpoint Protection

 View Only
  • 1.  report show me a strange information

    Posted Sep 28, 2015 10:35 AM
      |   view attached

    Hi i need help. 
    I see in my sepm a strange information because i see in the reports that appear hostname that do not exist in my Active Directory estructure.
    My question is: 
    Why SEPM show me this information?

    I attach an image with my issue...

     

     



  • 2.  RE: report show me a strange information
    Best Answer

    Posted Sep 28, 2015 10:42 AM

    It's not the hostname, it is the account that the scan ran under. It just means that the scan detected and acted on virus activity using the SYSTEM account.

    It does this so it can run with full privileges and act on malware accordingly.



  • 3.  RE: report show me a strange information

    Broadcom Employee
    Posted Sep 28, 2015 03:22 PM

    What's the SEPM version?



  • 4.  RE: report show me a strange information

    Posted Sep 28, 2015 04:44 PM

    HI CHetan, i have sepm 12.1.6, the last version...



  • 5.  RE: report show me a strange information

    Posted Sep 28, 2015 05:56 PM

    This is the built-in Windows SYSTEM account. It's not the name of a computer on your network.



  • 6.  RE: report show me a strange information

    Posted Sep 29, 2015 06:47 AM

    when scheduled scan kicks of if a user is logged in, then the scan will be initiated under the user's logon name and if there is no user logged in then the scan will be initiated with the windows built-in account which is "System".



  • 7.  RE: report show me a strange information

    Broadcom Employee
    Posted Sep 29, 2015 09:25 AM

    If it's AD synch, I will suggest to delete the AD synch and add it agian.

    It should populate the correct sturcture in the SEPM.