u/mrfilmlover

[removed]

Hi. So sure someone has done this before but we gave some alerts for attack path to privileged accounts and they come to privileged accounts logging in to a laptop or server where they should login normal and if want to action then should elevate. I've deleted the user profile of said privileged account from the device so that is gone but the alerts stay. I was advised this was the best approach but they do not clear. I even checked one device and couldn't see a user profile of the privileged account to even delete. Does anyone else get this?