I'm late into this thread so my apologies if someone has already given this info.
The release of DataONTAP targeted for 1st quarter CY99 will include access logging for CIFS. You'll be able to track file and directory access and user logon/off for CIFS users. This is a subset of the auditing available for NT servers. More details will be available as the release gets closer.
===================================== Bridget Allison Manager, NetApp Windows Networking Network Appliance Inc. office: (408) 367 3419 cell: (408) 823 1126