I wanted to thank all of you for responding. What is happening is that I have been given the actual title of IT Admin in the shop. We do have a security policy and a company resources usage policy but so far those have not been enforced. I have been asked to gather more information on how to do the logging which is why I was searching.

We have a network with a domain. I do not believe that we have ISA turned on and to my knowledge there are no other services running that should be logging user activity. I just wanted to be sure that I had not missed something obvious before telling managment that those things are not being used. I will need to check my firewall but I don't believe I am logging outbound traffic. I don't actually want to log the users, I just want to be able to answer correctly when I say we do or don't have the logs.

I am now going to go look up ISA and IDS.

Thanks again.

Merlin775