Have you checked the security log of the machine you are testing? If there is nothing there, then LEM has nothing to pick up. You will need to enable auditing. If it's there, then try doing an nDepth. search. You may just to define your filter differently.
↧