These reports are generated with the help of the Desktop Central Agents installed in the client systems to track the user logon details
In the case of Active Directory reports, if multiple domain controllers are used, the synchronization of data between the domain controllers happens at regular intervals and not very frequently. Hence the reports derived from the Active Directory may not be the latest or actual. To provide the current reports of the logon details, Desktop Central agent is used.
In addition to the current details, it also provides the logon history details, which is not available in the Active Directory reports.
Yes, these reports are available only to the users and computers that fall within the defined scope of management. Also, when an user logs in and logs out immediately, this may not be tracked.