Is there a way to log which sites a user goes to by logging the Novell login name and the sites visited? we also have a windows login box that comes up after Novell login (that is the same for all users)

To log internet use you would typically use a proxy server. It acts somewhat like a router with all internet requests by users being made to the proxy server which then delivers the site either from its accumulated cache or from the external internet connection. In that process, the proxy server keeps a log of all requests.
For Novell you would install Novell Bordermanager.

Network Cat

With WinXP/2000/nt a user needs to log in to both the local workstation and to the network. You are seeing a login requester for the network followed by a login for Windows. The two login accounts can be the same or different depending on the environment.

eg
A user may authenticate to Novell as 'xyz' and to the local workstation as 'localadmin'.

A user may authenticate to Novell as 'xyz' and also to the local workstation as 'xyz' in which case the user may only see the first requester because the user's credentials are passed on to the Windows login. In this case, you would have to create an account 'xyz' on the workstation with the same credentials as the network account.

Under a Novell Zen Dynamic Local User policy, the user may authenticate to Novell as 'xyz' and Zen creates a temporary local account that is active when the user is logged in, but is deleted as the user logs out. It avoids the build up of local accounts in a multi-user environment.

Network Cat