Different recommendation for DCs and non DC server

[Saxomania]

so its not a real issue..

I enabled the GPO for one member server - now there are a lot of events in its Security Eventlog from domain logon/logoff and so on. Thats fine but its not interesting on a default member server.

Is there any recommendation which GPO setting should be enabled on DCs adn which setting only on member server.

If i would now enable this GPO on all our servers we will have a lot of dublettes and because we want to forward the logs to a syslog server this seems to be ineffective.

Thanks