The auditing in version 10 only tracks the viewing of Crystal Reports and running programs (*.js). It can't track a user who accesses URL, Excel, Adobe, text, Word, etc. objects. If your environment is mostly Crystal Reports you'll love it. In my case, with a lot of legacy URL report links, I'm disappointed. BTW audting isn't turned on per object as they're published. It's enabled in the CMS for types of actions (i.e., log on/off, folder create/change, report viewing/scheduling/failing, etc.)