---
title: Realm Check for Windows Agent
slug: kronpam-agent-reference-guide/realm-check-for-windows-agent
description: Learn how to assign agents to device groups in Single Connect and ensure that users in the same Device Realm can log in without any issues. Find out what happens if the LDAP user account is not defined or imported from Active Directory and how it affects 
docTags: 
createdAt: 2023-06-20T15:17:16.000Z
---

When an agent registers itself to the Kron PAM, in Device Inventory it appears on Unassigned Devices. So, we need to assign this agent to a device group. The user who needs to log in to this device should be in the same Device Realm as this device. Otherwise, the user will be blocked by an agent. 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/223sx9ZERoK2w1admKbhO_image.png "User Warning on Desktop")

If the LDAP user account is not defined or imported from the Active directory to Kron PAM when the user wants to log in observe the below warning.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/KGVAbbA-15Jgf6T5AgJMZ_image.png "User Warning on Desktop")