How to audit user logons

Can anyone tell me how to audit successful and failed user logon attempts on a windows 2000 domain with roaming profiles?

I have already tried enabling these in the "default domain policy/computer configuration/windows settings/security settings/Local policies/Audit policy/Account logon policy" on one DC but it hasnt worked.

Should I be doing something else? We have 3 DC's, do I have to enable auditing in the local policy on each machine?

Thanks

 

The DCs should be able to capture logon activity on the domain.

http://searchwindowssecurity.techtarget.com/tip/1,289483,sid45_gci998061,00.html

 

Thanks Newt.

I don't know what I did wrong the first time, but I did it again using the link you gave and it works fine.

Ta