rottendumpling

Ah I see, that makes sense. Thanks for the fast and detailed response!

Recently I set up my workstation to audit successful or failed logon events. I rebooted to test it out and found out that a failure audit is recorded alongside a success audit. How can both a failure and success be recorded at the same time every time I logon?