Auditing Logons and Logoffs

I am sure that this has been mentioned hundred of times but still I
need some help in understanding a few things, so please bear with me.
Have an Win2k domain 3 DC's 800 Users.
All computers are members of the domain and they logon as a domain\user
I have enabled auditing on the Domain controllers ou to audit logon
events for success and failure. I do not have Audit account logon
events enabled.
I have an event log program to centralize all of my security logs into
1 mssql server.

Now the real question. What is actually getting logged?
Here are examples of what I would like to see in the log.

1.User comes to work 8:00am logs into their workstation as a
domain\user
Will I see an event in the DC security log? What will it be?
2. User goes to get coffee locks computer?
Will I see an event in the DC security log? What will it be?
3. A users screen saver kicks in that requires a password to unlock
Will I see an event in the DC security log? What will it be?
4. User accesses a file\folder on a windows share
Will I see an event in the DC security log? What will it be?
5. User goes home for the day logs off of system
Will I see an event in the DC security log? What will it be?

.

Relevant Pages

  • Re: Tracking unauthorized access to my computer
    ... Remote Desktop. ... The user name, logon type, and time can give you an idea who is ... Also look at your own logon events for your user account ... I would also increase the size of the security log to like ...
    (microsoft.public.security)
  • Re: Event 529 occuring 2500 times every day
    ... I am receiving this error message in my security log about 2500 ... Logon Failure: ... User Name: HSSSERVER$ ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 529 occuring 2500 times every day
    ... I am receiving this error message in my security log about 2500 ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 529 occuring 2500 times every day
    ... Just to let you know the error message has disappeared 30 days after I ... I am receiving this error message in my security log about 2500 ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 529 occuring 2500 times every day
    ... I am receiving this error message in my security log about 2500 times ... Logon Failure: ... User Name: HSSSERVER$ ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)
Loading