All-in-one remote monitoring tools are becoming more widespread, and can keep track of a plethora of activity.
- Keystrokes, to get everything the user types.
- Web browser activity, such as visited sites.
- Which programs have been run and how long they ran for.
- Screenshots of what's on-screen, to catch even more,
Of course this software has to be installed on the machine beforehand, and not all security programs like it, so make sure there's time to set things up properly... but they can be a big help in catching users doing things on the machine that you don't want them to. Of course as these programs are software, things that happen outside the OS cannot be logged so it's important to have physical security as well.