From what I've read online, it's a normal event that returns Group Membership Information. It appears in the logs between events 4624 (An account was successfully logged on) and 4634 (An account was logged off). By being tagged as MachineLogonFailure, if I filter on that event there are tons of results that don't appear to indicate a failed logon.
↧