I am auditing our SQL logins for usage. I have already disabled the ones that I am 99% sure are NOT being used. After disabling the logins I thought it would be a good idea to watch profiler or the SQL log viewer for any failed logins. I used SSMS to test a failed login with a disabled account, but I dont see the failure in profiler or log viewer. I tried with both a good password and a bad password for the SQL user, and neither showed up. Under server properties/login auditing the bubble for "failed logins only" is selected. What am I doing wrong?