Enable your computer's local security settings first, set [Audit account logon events] to success, failure. After that point, you can start to monitor logon trace.