How to verify authentication mechanism used

[prasannat]

I have a scenario where users had local accounts created on firewall and now we have created user accounts in the Active Directory. The local accounts are to be deleted and all users should authenticate via AD only in future. To avoid disruption and migrate all the AD based accounts smoothly, how to identify if user is authenticating locally or via AD.

[funkylicious]

In the logs you can check after the Key install logs, for the Decrypt packets and the field called Src User Dn which should contain the full path for the user in AD.

[prasannat]

Thank you for your response. I managed to find the field, is there a way to export this information for all users which have this filed populated.  

[funkylicious]

You would require to do a ActiveDirectory query for all users and get the distinguishedName attribute.

It's basically the full path to which the AD user is found in the Forest/Domain .

[G_W_Albrecht]

Try in SVTracker to show the column, filter and export.