Expanding on Security Audit in Event Viewer

[Azhar]

Is there a way to expand on Event Viewer's Security Audit? It just shows the user name and Logon ID and GUID and what time they logged in and whether it was successful or not. Is there a way to expand on it? For example, getting it to tell the computer name or IP address or MAC ID of the user that logged in?

I need a way to determine if someone logged into someone else's account in Citrix and Terminal Server. Security Audit tells you when they logged in, and what user name was used, but it doesn't give you the IP address or anything.

Thanks.