This tab page allows you to determine to what remote machine Logon Monitor Server Edition will send its data records.
The Logon Monitor Server Edition Control Panel Applet - Forwarding Settings Tab
Data Forwarding
Enabled
When this box is checked, Logon Monitor Server Edition will forward on all of the logon activity it collects to the machine specified on this page. This includes data generated on this local
machine, and any data it forwarded to it from other machines running Logon Monitor Server Edition (see the Networks tab page if you want to enable this machine
to accept forwarded data from other machines).
The remote machine selected on this page must also be running Logon Monitor Server Edition in order to be able to accept data records.
Network traffic over ports 1017 TCP and UDP must be allowed between all Logon Monitor machines.
Forward to the PDC in this machine's Windows domain
When this button is selected, Logon Monitor Server Edition will attempt to discover the name of the PDC for the domain to which this machine belongs. It will then begin forwarding on
logon data to this machine.
This is the default selection, which is a good choice for smaller networks and doesn't require any manual configuration. Simply install
Logon Monitor Server Edition on the PDC and use its Network tab page to accept data from all the network subnets on which domain member machines exist. Then,
install Logon Monitor Agent on any domain member machines on which you want to monitor logon events. The member machines will automatically begin forwarding on their data to
the PDC.
Forward to specified machine:
Use this selection if you do not want to foward data to the domain PDC but to some other machine instead. This may be because your machines are not members of the same domain
(or any domain) or if you want to specify a more detailed forwarding hierarchy.
Examples:
Forwarding to the PDC
The PDC should have its own Data Forwarding settings turned off, since it will not be sending login data to any other machine.
Set Data Forwarding on all of the machines running Logon Monitor Agent to the Forward to the PDC in this machine's Windows domain setting. This is the default setting.
Forwarding to a single non-PDC machine (whether or not it is on the same domain)
The Collection Machine should have its own Data Forwarding settings turned off, since it will not be sending on data to any other machine.
Set all of the machines running Logon Monitor Agent to forward their data to the BIOS Name, DNS Name, or IP address of the machine you want to be the Collection Machine.
Forwarding following the normal domain heirachy
The PDC should have its own Forwarding settings turned off, since it will not be sending on the information to any other machine.
Set the Data Forwarding settings on each BDC to the Forward to the PDC in this machine's Windows domain option.
Set all of the domain member machines running Logon Monitor Agent to forward their data to the BIOS Name, DNS Name, or IP address of their BDC.
Forwarding from multiple domains to a single data collection machine
Set each Logon Monitor Server Edition on the PDC machines to forward their data to the BIOS Name, DNS Name, or IP address of the ultimate collection machine.
Set the Data Forwarding settings on each BDC to the Forward to the PDC in its machine's Windows domain option.
Set all of the domain member machines running Logon Monitor Agent to forward their data to the BIOS Name, DNS Name, or IP address of their BDC.
Specifying Forwarding Settings using the Registry
These settings are kept in the HKLM\SOFTWARE\Greyware\Greyware Logon Monitor\Network registry key. If you want to set the forwarding configuration on multiple
Logon Monitor machines, you can set these values including a .REG file with these values in a login script, or any other method your network may have for setting remote registry settings.
Forward to PDC
Key name: Forward Type
Type: DWORD
Value: 2
Forward to specified machine
Key name: Forward Type Type: DWORD Value: 1
Key name: Forward To Type: REG_SZ Value:NETBios name, DNS name, or IP address of the collection machine
- Click this button to test whether the machine specified will accept logon data records.
- Click this button to have this machine resend all of its current data to the remote machine to ensure that it contains the same data as the local machine. Useful
if you have changed the forwarding location to a different machine or if you suspect data records were not transferred successfully.