https://ksfboa.com/zh-TW/tech/jacki/how-to-track-user-logon-activity-with-logon-auditing.html