Audit logon events or audit account logon events
I knew this at one point, but now I am starting to second guess myself. Auditing account log ons only audits when a person logs into the computer. Audit logon events will log any time that an account accesses a computer on the domain. Correct?
Decide what to be and go be it.