Hi, I realized that i have been getting event ID 540 for a specific user in my domain controller. Example User Name: 1234 User computer name: com1234 When the user 1234 login using com1234 into domain. I saw 2 logs for eventID 540 First depicting login by 1234 Second depicting login for com1234. I would like to check if the user:1234 uses com1234 to log into the domain, will it explain the 2 event log that i mention above?