if a person is using proxy I can see by IP address in the proxy logs
where all they went. But if we have dynamic nat turned on, and we dobecause somethings just don't work well through proxy, can I find a
someplace that tells me where all this person might have gone?

what a disgusting job to have to do...and no, they won't buy cyber
patrol or anything like that....