I have this problem. PA-220 with PANOS 8.1.7 and agentless user-id. In "Monitor>USER_ID" I find several user records like: domain\PC-abcdef$ or
that actually are not domain users. I have filtered some of them with ignore-user-list, but it is not enough.
There is an issue of Windows domain-active directory configuration ?