Monitor / Time Stamp User Log Off

I need to log or timestamp when a user logs off (leaves). The server is running win2k advanced and the workstations are Macs. Event Viewer isn’t much help either. There must be a better way than scheduling a net session batch? Any help is greatly appreciated.