Hello,
Do you see this for only computer WIN-HLD7KRSPQGM or for a lot of computers ?
It looks like that a process is doing a logon sessions for all users on the machines around 19:34.
Maybe a backup software is doing this ?
caf,register is detecting the logon session events and does a registration for the users.
You could have a look at log DSM\logs\TRC_CF_REGISTER*.log and in Windows event viewer in order to find out which process is doing this.
Thanks.
Regards,
Jean-Yves