Authenticated R3000 users will have one of three following username formats in shadow.log
Note: you can change the displayed username in ER Reporter Client under ER administration GUI (database pull-down)
Syntax 1: <domain_label>\DEFAULT\<username>
Example: dirsec\DEFAULT\garretta
Note: this signifies the authenticated user 'garretta' received the "domain default' profile as specified under domain properties (R3000 GUI // Group tab // LDAP icon // click on domain object)
Syntax 2: <domain_label>\INDIVIDUAL\<username>
Example: dirsec\INDIVIDUAL\garretta
Note: this signifies the authenticated user 'garretta' has specific Profile assigned to user object in Directory. 8e6 denotes this with "person" icon under domain object (R3000 GUI // Group tab // LDAP icon // expand domain object)
Syntax 3: <domain_label>\<Directory_group_name>\<username>
Example: dirsec\Security Team\garretta
Note: this signifies the authenticated user 'garretta' has specific Profile via membership to Directory group 'Security Team'. 8e6 denotes this with "group" icon under domain object (R3000 GUI // Group tab // LDAP icon // expand domain object)
Example entry in User Name Log
Located under: R3000 GUI // System tab // Diagnostics // View Log File // User Name Log (usage.log):LOGON, 2007-03-26 16:33:30, 10.0.0.34, lab\INDIVIDUAL\garretta, Rule6, ,0x0,p3,0x46084a76