We got normal setup of 300 users with DLO 7.6 and mix of Windows XP, 7 and vista
Recently we got alert from network team about DLOADMIN trying to access internet from one of user. and this repeated for another few set of users where DLO is installed.
I was pretty sure it ISN'T DLOADMIN but the actual user who is accessing internet but FIREWALL gets DLOADMIN as user.
We checked DLOADMIN was not set as service acount for DLO agent and if DLOADMIN is blocked on FIREWALL actual user is affected. (Quite surprising issue isn't it)
Any idea what could be wrong here how to get DLOADMIN out of this here.
Active Directory does reports kerberose auth successful events for DLOADMIN from same affected system on same time of internet access logged by firewall.
How to debug this ...
