You can use the Change User Audit (CHGUSRAUD) command to enable the logging of specific user activity. You should consider enabling user auditing for any user with special privileges such as QSECOFR and any user with *SECADM and *AUDIT capabilities.
© 2007-2010 BalaBit IT Security
Please send your comments or documentation bugs to: documentation@balabit.com