What happens if a network computer is taken off-site (i.e.: a company laptop)?
If a monitored computer is taken off-site and it is configured to store logs to a network location it will automatically default to local log storage until it returns to the network – after which it will store its saved logs to the network location again. If the computer is configured to store logs locally nothing will change if the computer is removed from the network.
