You could install a WH_JOURNALRECORD system wide hook to monitor the user's actions ...unfortunately this is onerous from VB without a third party dll - see AllApi.Net for how they do this.

HTH,
Duncan