We assign /30s to each student from dynamic pools and search event logs
when we get notices, then we move the user to a specific restricted role
with a filter. We've created separate roles that redirect the user to a
notification page explaining what's happened (RIAA/MPAA flavored pages
depending on the notice), with campus contact information.
--
Don Nightingale
Systems and Networks Manager
Wellesley College