The audit is/ will be a great tool, Now all thats missing(as far as I can tell) from this useful audit tool is just a field in the table for the workstation a keypress has come from. For such a widespread-able system you should be able to track not only the user that hit a button/changed a value, but the computer it came from. I guess I should suggest it as an addition as it is crucial, unless you have any ideas?(trying to keep from haveing extra scripitng involved)
Thanks