It is possible to trace down KVM users who connected to the vPro machines? (Let's say there is an Agent use KVM from his desktop to access the vPro machine). If Yes, How can I trace them?
As soon you enable audit log in ME, you can track the access and nature of InitiatorType (i.e. HTTP Digest, Kerberos, Local and KVM) as described in the following http://software.intel.com/sites/manageability/AMT_Implementation_and_Reference_Guide/DOCS/Implementa... link.