Auditing for logon typically needs to be set on the DCs
_________________________
How to ask questions the smart way <-----------> Before you ask