Is there a way with Windows 2000 Server to monitor if a
user is logging on to the domain or if the user is
logging onto their local machine and accessing the server
that way? I know I could deny them access to logging on
locally but it would cause problems with management and
users. I have also removed the shortcut on the startup
option but you can still see it when you go to "My
Computer". I have Windows 2000 Server and XP Pro clients
if this helps out. Thank you in advance for any help.

enable domain security audit log to monitor logon... do it from the domain level, default config template (use the mmc)

the mmc)