We're trying to investigate some potentially strange usage on a computer on our network. When we look at Last Login -> Logon Time for most computers we see odd times in the middle of the night. We know that there are no humans actually logging into the computers at these times.
We'd like to know what this date is based on. Is it based on background processes that communicate with the domain controller for authentication or some other thing?
