Hello,

For some weeks, when we receive an email notification concerning a user logged on a monitored ressource, the IP mentionned is always 127.0.0.1 instead of the user ip.

I don't know why...I don't think to have make any change on local configuration and I don't find a specific setting to manage that...

Do you have an idea or a way to investigate on this issue ?

Many thanks in advance.

Fred

 

Hi Fred,

In the security event log what ip address does Windows see?

Cheers

Chris