EvotecIT/PSWinReporting

Events for Lockouts are duplicated on PDC and other DC's

PrzemyslawKlys opened this issue · 0 comments

When lockout happens it often happens that lockout is reported on one DC and then transferred to PDC. This means 2 events for 1 real event.

Maybe some kind of duplicate checking - if Event ID, User, Computer, Action, and only RecordID/Controller doesn't match merge events.