Logon events for some users cant be seen while logon for few users can be seen using event ID 4768. Just wondering where these events are going yet account logon success and failure has been enabled in the AD controller.
↧