Verifying Auditing Is Configured Properly

To verify that the host records login and logout events, follow these steps:

1. Log out of the host and then log back into the host.
2. From Start, select Settings, then Control Panel, then Administrative Tools, and finally Event Viewer.
3. Select Security Log and choose Filter from the View menu. Select Security for the Event Source and Logon/Logoff for the Category fields.
4. Click OK.

The Event Viewer should have the activity recorded as Event 528.