Some Live Users Show up as Administrator in STAS

You have any Windows services or scheduled tasks that use the Administrator user to run under?  In my experience, that'll do it.

Hi,

no there aren any task on the client pcs.

i have ca. 50 users...

about the half are shown up as Administrator. But not the whole time.

it seems like they show up randomly as Administrator then randomly with the correct name.

I am the first one with this Problem?

Hi,

no there aren any task on the client pcs.

i have ca. 50 users...

about the half are shown up as Administrator. But not the whole time.

it seems like they show up randomly as Administrator then randomly with the correct name.

I am the first one with this Problem?

Hi,

never saw such a issue on STAS before. But the agent basically gets all the Login Events on the DC. 

I would recommend to check the event log. There should be some events regarding Administrator logged into the the Client PCs. Maybe some services?

https://www.eventtracker.com/newsletters/following-a-users-logon-tracks-throughout-the-windows-domain/

Additional logon/logoff events on servers and authentication events associated with other types of user activity include:

• Remote desktop connections
• Service startups
• Scheduled task
• Application logons – especially IIS based applications like SharePoint, Outlook Web Access and ActiveSync mobile device clients

Cheers