Event notification works. I use a server-side trace for login events to get the same sort of data, mainly just because I've been doing that for eons at this point and am comfortable with it.
Definitely a good article.
Another thing to keep in mind, that was mentioned in the article, but I didn't see anything in the dicussion on it: Don't rely on people in testing. I use traces of real activity to make sure things like this won't have unintended consequences.
- Gus "GSquared", RSVP, OODA, MAP, NMVP, FAQ, SAT, SQL, DNA, RNA, UOI, IOU, AM, PM, AD, BC, BCE, USA, UN, CF, ROFL, LOL, ETC
Property of The Thread
"Nobody knows the age of the human race, but everyone agrees it's old enough to know better." - Anon