Configure Infrastructure for Monitoring Logon Activity

You can configure your IT infrastructure for monitoring Logon Activity in one of the following ways:

• When creating an organization — select the Adjust audit settings automatically option. For existing organization, you can modify data collection settings for Logon Activity data source.
• To configure your domain manually for monitoring Logon Activity, perform the following procedures:
  • Configure Basic Domain Audit Policies or Configure Advanced Audit Policies
  • Configure Security Event Log Size and Retention Settings
  • Configure Windows Firewall Inbound Connection Rules