Indeed. It will also save your company time and money (in more ways than one). I work for an ISP and I intentionally do not log user <-> IP address mappings.

Indeed. It will also save your company time and money (in more ways than one). I work for an ISP and I intentionally do not log user <-> IP address mappings. The time I've had to spend producing similar information in response to such requests is very minimal (basically, "sorry, we don't have that!").