> Hi Bryan net-alyzer could solve this problem for you. It reports on all activity and where you are using DHCP and the users name is not in the logs you can enable the "IPTRACK" feature of the solution. This feature creates an association between a machine and a user so that activity from a machine can generally be associated with a user or account. For more information go to www.net-alyzer.net They also offer a discount to ISAServer.org members. reagrds Adrian Soft-ex