Turning On Security Logging gpedit.msc Computer Configuration Windows Settings Security Settings Local Policies Audit Policy Turn everything on both success and failure.