The cookie feature prevents duplicate audits by placing a small file on each client machine. When Log Info runs, it checks for the cookie first. If the cookie exists and matches the current audit cycle, Log Info skips that machine. This ensures each machine is only audited once per cycle, which is essential when the program runs at every login.