BO4 - Auditing - showing user logged in though account been disabled for months
We are using the bo4 audit universe from the sdn forums as recommended in other posts.
One of accounts is disabled but when run user report for last login by username, this one shows as having events couple of days ago.
User concerned was a power user so would have set up schedules but since account disabled would have thought by limiting to event type logged on woudl not see their name.
Anyone know why this would be the case?