First of all confirm within the individual machines that your computers are currently logging successful user logons (this is not turned on by default in most Windows environments). The vast majority of times when people can't find a particular event in LEM I have them jump into the source directly to see if those events are there, and we find that they are not being logged to begin with, so LEM cannot know about them.
KB on audit policy settings for windows: Success Center