open cmd
to view the audit policy
auditpol /get /category:*
auditpol /set/category:"system","account logon" /success:enable /failure:enable
auditpol /get /category:*
auditpol /clear /y
to view the audit policy
auditpol /get /category:*
auditpol /set/category:"system","account logon" /success:enable /failure:enable
auditpol /get /category:*
auditpol /clear /y