I'm with ric-o on this one...............I just checked this XP pro box, and it is all switched off. I guess that makes sense, as the OS is mainly intended as client software in a networked corporate environment, so the admins would set whatever policies they wanted, rather than relying on defaults.

I think SDK has a good point, some sort of total hours or curfew program is what you need. If the kid doesn't log-off, then there will be no event to record?