A.M.S. is Server / Client software meaning that A.M.S. Server and its database is installed on the network server with A.M.S. Client software being installed onto the computers to be monitored. All the A.M.S. Clients communicate over the network to A.M.S. Server's database.
N.B. The layout and configuration of a network is irrelevent to A.M.S. All A.M.S. requires, is the ability for a path to be seen between the A.M.S. Client directory and that of the A.M.S. Database on a Network Server.
A.M.S. Client is normally configured to start before the user logons onto the network. When the A.M.S. Client starts it checks three things - the Client Configuration File in its local directory and both the Filtered & Flagged Events Lists located in the A.M.S. Database on the Network Server.
As the User visits websites, runs software, uses Windows Explorer, all their actions will be recorded by A.M.S. Client and sent over the network to be recorded in the A.M.S. Database. N.B. A.M.S. does NOT include (and never will!) any form of keylogger.
When convenient, the Network Administrator uses A.M.S. Server to go through the events to look for things that may cause concern.
Events which the Network Adminsitraotr does not want the Users to access may be added to the Flagged List and (optionally) shut down. It does not matter where the event is being accessed from, which user it is or even if the software resides on removable media, it will not be allowed to be accessed !