This article explains why is the user's Machine Name displayed in the live users list rather than their username, for NTLM?