Auditing Event Logs & group policy for screen to lock after a set period of time

I have a windows 2000 Network, with a W2K DC.  I have set up in the Domain Security Policy to audit for login fails.  Then I tried loggin in with the wrong password to simulate a bad attempt.  Then i went to the domain controller and tried viewing the event logs to see if the failed attempts showed up and they didn't.  They were still on the local machine.  Is there some setting that i need to change to correct this?  And or maybe a utility that can help centralize reports from the 15 or so clients that i have and want to audit.  Also i was wondering on windows 2000 server if there is a way to set a group policy for all clients to have a screen saver lockout after 20 min or so of inactivity.  I would love to hear some advice.  Thanks

Wompa