Summary
In the email notification, the “%n” variable is used to show the username. However, there are instances that “%n” is replaced as SYSTEM.
Below is the sample configuration of the notification:
Virus/Malware: %v
Computer: %s
User: %n
Domain: %m
File: %p
Date/Time: %y
Result: %a
The result shows the following:
Virus/Malware: Eicar_test_1
Computer: Hostname
User: SYSTEM
Domain: Local_domain
File: C:\Users\Username\Desktop\Eicar.txt
Date/Time: 3/4/2015 9:49:26
Result: Virus successfully detected, cannot perform the Clean action (Delete)
Details
To show the actual username:
- On the OSCE server, open c:\Program Files\Trend Micro\Officescan\PCCSRV\ofcscan.ini using a text editor like Notepad.
- Look for DisableSIDName and change the value to “1”.
[Global Setting]
DisableSIDName=1 - Save the file.
- Log in to the OSCE web console.
- Go to Global Settings.
- Click Save to push the configuration to OfficeScan client machines.
The username should now appear in the email notification of OSCE.
