I can’t seem to figure out how to change the Auditing setting in Win2000Professional to enable Auditig for specific events like logon/logoff. I can enable it but it does not let me change it to just failure. It stays at success/failure. I am a new admin so I figure it has to be just something that I am missing. Anyone help? I have been running the MS Personal Security Advisor thru Technet/MPSA and it keeps reporting that I need to change it to just “failure” and even shows screen shots.