You are viewing limited content. For full access, please sign in.

Question

Question

Directory Server - Users getting their licenses changed by NT AUTHORITY\NETWORK SERVICE

Directory Server
Updated January 30
asked on January 30 • Show version history

The customer has these simple rules to assign licenses to users in AD groups which have been working without issue for years and no recent upgrade has been done on their system.

Many users suddenly did not have licenses out of the blue today and the administrator said they did not remove anyone's license. Then while I was looking into it I was saw many users get their license applied back and again the admin said they did not apply any license changes. So we could run an Audit report to see who was doing this and it is NT AUTHORITY\NETWORK SERVICE.

It has actually been playing with user licenses on random intervals all day and night. I can find so many User - SetLicense actions in just a single day for any user.

What is going on here?

0 0

Replies

replied on January 30

It sounds like you are running the LFDS service as NT AUTHORITY\NETWORK SERVICE which is the default and LFDS is simply performing synchronizations on whatever interval defined in LFDS.

0 0
replied on January 30

But why would it be changing user license status?

0 0
replied on January 30

Perhaps the new 'AD GS mode' of LFDS sync is enabled when it wasn't previously? 

I am still unclear on exactly the differences in how sync operates when its enabled vs disabled.  My limited understanding of it is that it handles AD sync failures differently.  This is the best reference I have found so to date.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...