Forum Discussion
christophebarre
Mar 08, 2023Copper Contributor
Events "A successful windows domain account logon by computer$"
Hi,
We see many events "A successful windows domain account logon by computer$" in "Timeline" of "Devices", from "Microsoft365 Defender" portal (https://security.microsoft.com/) .
We don't understand these events because the "logon by" is attributed to computer accounts of our AD (and not to "user accounts").
Could you please tell us these events meaning?
Regards,
Christophe
1 Reply
- jbmartin6Iron ContributorThe OS uses an account to access resources just like the user does, and generates logon events when it does just like the user.