I am having a problem with ELA. I have ELA installed on a server in domain A. I have it setup to collect logs from windows servers in Domain B. I have credentials setup in the host setup for Domain B and it is collecting logs fine. The problem is that ELA is also trying to connect to each of these servers using what appears to the the ELA service account or the current logged in used on the server running ELA on domain A. Since it is passing the domain name of Domain A for the user when it does, it is causing account lockouts on the servers in Domain B. Has anyone else seen this behavior? I thought that ELA only would use the credentials that were setup for the host but apparently, there is some other form of authentication that it tries to do as well. What is interesting is that it still works so it appears that for whatever reason, it is not needed. I have confirmed this to be the issue by disabling the collection and the 644s stop until I start up collections again from ELA for these servers. Any tips much appreciated. Thanks.