Would it be possible to have better auditing in the SEPM. As when you run a report from monitors > System > Administrator all it seems to give you is when and admin logged on or logged off.
It does tell you've they've moved a machines group or deleted a machine but no detail of from where to where or which machines.
Would also be useful if it gave you information about if they've made changes to reports or notifications so if there is an issue you can trace back as to who did what so you can find out off them what they did.
