Is there a tool that I could use to monitor what users do when they log on to a server. (The NT Security Audit Option is not what I am looking for). I need to know, for example, if someone logs on to a server and uses the notepad. Is there a tool that will log this event and tell me who, and what was done? Or say the user logs on and installs an application – I need to know what the user installed. – Thanks