Forum Discussion

christophebarre's avatar
christophebarre
Copper Contributor
Mar 08, 2023

Events "A successful windows domain account logon by computer$"

Hi,

We see many events "A successful windows domain account logon by computer$" in "Timeline" of "Devices", from "Microsoft365 Defender" portal (https://security.microsoft.com/) .

We don't understand these events because the "logon by" is attributed to computer accounts of our AD (and not to "user accounts").

Could you please tell us these events meaning?

Regards,
Christophe

 

 

1 Reply

  • jbmartin6's avatar
    jbmartin6
    Iron Contributor
    The OS uses an account to access resources just like the user does, and generates logon events when it does just like the user.

Resources