In the operation log obtained when no one logs on, the user name will be recorded as "SYSTEM", while the domain name will be recorded as "This computer name".
When the user name in the logs is recorded as "SYSTEM", the domain name will surely be recorded as "This computer name".
If the logon user performs operations within seconds after logon, the user name of log will be recorded as "SYSTEM".
In startup, shutdown, sleep, and return logs of PC, the user name will be recorded as "SYSTEM" and the domain name will be recorded as "This computer name".
If multiple log-on users exist, the user names will be recorded as "SYSTEM" and the domain names will be recorded as "This computer name" in E-mail sending log and E-mail attachment prohibition log.
The user name of file operation log will be recorded as "SYSTEM" and the domain name will be recorded as "NT AUTHORITY".
When the log information recording was stopped due to a compulsory shutdown of the power of the client (CT), the log information will not be recorded.
The operation log or prohibition log retrieved may contain confidential information such as passwords. Consider security and take necessary actions such as restricting the log viewing privilege so that confidential information is not viewed by a third party or end user.
