If everyone gets local admin on one system it means everytime I compromise one account I can use lateral movement to get to the next system. By default windows does not log successful authentication. If you do not change this you will not see all of my successful logins.