I've been posting on the Microsoft CRM Team blog again.
The article describes how to make use of the IIS logs to get useful information about who is accessing CRM and when.
This technique uses some SQL objects (tables, view and functions), and a reporting services report. The source code for these is available on the MSDN Code Gallery