auditing logon and account logon events

Hi all,

I would like an opinion on this.
MS seems to recommend to use the default domain controllers policy to
govern the auditing policy.
In the domain I administer, instead, both logon and account logon
events are set by the default domain policy.
In terms of best practices, do you think this is a wrong configuration
?

Thanks
Bar