From another discussion thread it looks like the ADsite field in table tblCPlogoninfo is only filled in when lsclient.exe is used. Since Active Scanning also collects authentication information from domain controllers, is it possible to also fill in this field to show from which ADsite the authentication occurred?
Thanks
Sebouh