Hi Ram,
Thanks, but that isn't what I'm looking for. I don't want to weed through tons of events for a specific user. I want to generate a report each month that shows ONLY logins for domain admins on all servers we monitor. What I'm looking for is the best logic to use for an nDepth report that I can run each month which captures only the events which indicate when a domain admin has logged on interactively to a server's desktop. I've gotten pretty close but not there yet.
-Keith