So you might be seeing some domain "special" users being on your box?