Sounds like big brother is watching you. At least it should be obvious for the user that he's being logged that way!

Some example from Germany: MS Word does not display, how long it took to create a document - it is forbidden by law!

@1: Dirk, in fact this idea follows two objectives. First is to help the help desk stuff. They will easily see that at the time the user claimed that "the application did not work!" (that's all some users say) the help desk department can see the real error the user got and the actions that were performed to reach this error.

Second, yes it may be used as a big brother. Banks and big companies would love it. When you try to open a DB and you are not authorized, this event is logged in the server log.nsf.... So I ask you to view this idea not from a user's point of view, but from the person who decides whether to use Lotus Notes or not (manager).

Moreover, it is "optionally".

But a lot of unnecessary; I would have left:
* user/server(also on execution of agents) errors
* user deletes a database
* user change ACL
* password is invalid (? doubt...)
* user sends an email (to whom and the subject and Date) - but only when the letter goes beyond the organization.

If you have used Securtrac you would see that this is a lot of information to track and store.

It should be in a separated db, not were everyone can find it. You would have micro-managers looking to see when you connected,etc.

Some couldn't be tracked easily by the server, how would you know a client changed locations?

@4: SecureTrac is a server based solution that audits server events.. while in this case the idea is to audit client actions.

Many of your suggestions can be implemented today using the Extension Manager. It requires some C skills, but it is very feasable.

@6: Rob, in fact extension managers get notified for background actions. It can not be used to detect when a document is exported, when a switch-id is performed, when the ACL window is shown,...