Does anyone know if the user logon information from tblCPlogoninfo is for interactive logons only.... or does it include none interactive user events?
I am trying to write a report that is logging actual interactive logon's to our servers and the tblCPlogoninfo is showing some "service accounts". So either the table includes none-interactive events or some comedian is using a service account interactively (yeah i know you can block that through GPO but I am creating a fact finding report first)
