Policy path: Computer Configuration\Windows Settings\Advanced Audit Policy Configuration\Logon/Logoff