IgnoreDollarSign

Used to prevent a problem involving Windows 2000 services that use a machine name followed by a dollar sign (wkstn$) as a user name when contacting the domain controller. DC Agent interprets the service as a new user to whom no policy has been assigned.

When this parameter is set to True, if DC Agent detects a user$ entry in its map, it compares the name to the source machine’s name. If these match, DC Agent ignores the logon session entirely, because it knows the logon did not originate from an actual user.

If the logon name and machine name do not match, DC Agent attempts to get the name of the actual user logged on from the source machine. If it obtains a user name, DC Agent pairs that with the IP address of the source machine, and records these together in its map. If DC Agent cannot obtain an actual user name, it simply records the user$ entry in its map.

This process minimizes the number of false user names DC Agent stores in its map and sends to Filtering Service.

When the parameter is set to False, if DC Agent detects a user$ entry in its map, the agent attempts to replace it with an actual user name from the source machine. If DC Agent does not obtain an actual user name, it records the user$ entry in its map.