I have 2000 users and I wanted very much to see where they went based
on Username. We eventually bought MS ISA (proxy firewall server) and
required authentication via AD. This lists usernames in a database and
everywhere they have gone on the internet for as long as you want.
ISA is not cheap though. However, it is the only way I found to track
via username and not IP.