I am trying to track the logon/logoff activity of users. I have turned on "Audit Logon Events" and when I look in the event log, I get IDs 538,576 & 540 repeatedly for the same user id. These occur almost constantly for each user
and there can be hundreds of logon/logoff events for the same user in the
Wat have I got configured wrong? I know our users are not actually logging on and off that often.