User justification showing N/A for Endpoint incidents
search cancel

User justification showing N/A for Endpoint incidents

book

Article ID: 160552

calendar_today

Updated On:

Products

Data Loss Prevention Enforce Data Loss Prevention

Issue/Introduction

User justification showing N/A for Endpoint Agent (EPA) incidents.

Resolution

This symptom can occur if you login as user-A and try to do an operation as user-B.

For example, login to a system as user ‘user-A’ and execute the ‘runas /user:<user-B> copyfile.bat’ (here copyfile.bat copies a file from local drive to USB). If there is a block/notify response generated in this case, it will have N/A as the user justification. This is because the CUI.exe process is for each session, in this case for ‘user-A’. But when the response gets generated for user-B, it doesn’t have a session and therefore no pop-up (note that block happens as expected in this case).