http://blogs.technet.com/b/dougga/archive/2012/02/04/how-to-trace-a-logon-using-only-one-machine.aspxThis is a Lab for you learn some basics for logon.  You can use this to observe user logon traffic for DNS, Kerberos, SMB, and more. Setup There are a couple of ways to collect a trace during logon from a client. One way is to hook up a hub to theen-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)