戻る
-
タイトル
Who field shows computer name -
説明
Who field shows computer name
-
原因
Most likely cause is this was done by a system account rather than a user and will user the server name there instead
-
対策
Change Auditor is monitoring and passing along the information it has observed and what was passed to LSASS. In this case the WHO field was recorded as servername$ or computername$.