Does Change Auditor support auditing logon events for servers and workstations?
Change Auditor is capable of auditing logon data If you have the Change Auditor for Logons license installed and a Change Auditor agent installed on the host(s) that you wish to audit the logon data for (not just on the domain controllers).
