Thanks again! The problem is just that I need to implement this on about 40 servers and schedule a procedure for collecting data to a table. How do I handle the ever changing trace file names? The logon event generates lots of events on some servers and I would therefor have to use rollover which causes the filename to change.

The idea is to, after 3 months, implement a procedure which disables all login accounts which have not been used for 3 months.