we like to monitor some of our user activity

1) when they logon and also when they unlock from a locked screen and when screens are locked

2) to create a historical report so we can see who was logged in during a particular period of time (couple of weeks)

3) being able to   do this from desktop central

currently the AD login report is very basic and only seems to show current logged in users but there is no way (as far as i can see) to track when a user logged in to a computer and when they either logged off or locked the  screen. the idea is that we get an idea when users come in and leave

is this configurable via desktop central? i know you can configure this via GPO so it shows up in the event log (4800-4801-4802)  http://stackoverflow.com/questions/11385164/eventviewer-eventid-for-lock-and-unlock but i like to be able to see a report and am hoping DC can help with this

best regards