Machine ID can be retrieved from the client log (SbClientLog.txt) if it had not been cleared, or from EEPC pre-boot screen Options, machine recovery.
Client log has cleared that info, doh
i don't want to contact the user if possible. so if i can get this out of a file on the remote machine, that would be great ?
anybody got any ideas why i am seeing this behaviour
You may try checking EEM user audit log. It has historical list of machine ID's that it synced in the past.