Do you use logon scripts? If so, incorporate tedob1's idea with the logon script.

When the user logs in, have this automatically execute from some network drive that has already been mapped. You may have some public share drive that everyone can access? Then log it to some network drive and examine at your leisure.