I have 2 ‘remote’ users that I want to audit their logon and logoff times to the network. They have to authenticate to our SBS server via VPN to logon. I do not want to waste cpu time on auditing all users logon/logoff events. Thanks for help.