control over privileged accounts

I don't know if I'm heading far from the topic. I only need a techie expert here. We want to ensure security of our organization’s IT infrastructure. We want to help users to be productive while reducing risk. How do we provide visibility and control over privileged applications and accounts?

One way is to to stop them from browsing gaming discussion forums which are entirely unrelated to your business. Here, let me help you with that. :)/>