I assume the queue does not hang off of any server then? If it did you should be able to go to your event viewer and take a look at jobs that were submitted for the time frame to limit your search.
Others have suggested doing a search of the hard drives, for anything in cache, but as you said that could be very tedious.
If you require your users to logoff you could check the event logs on each of the machines to see when logoff occured for people, again to limit your search.
If you do not have a proxy server you might want to invest in one as it could give you this tracking information a bit better and let you block sites that you do not want users getting to.
|