For some reason Event Id 530 (logon access time restriction violation) is not registering in Event Viewer, when I know that several PCs are being left on overnight i.e. outside the users' access time restrictions.
Could there be an explanation for this?

