Everything you need to know about Windows logon auditing
Details
The difference between authentication and logons.The auditing settings you need to configure to enable logging.The 12 critical event IDs to keep track of.Logon types, failure codes, and other event fields to keep an eye on.How to overcome the limitations of native auditing.