User Activity

We have a situation where someone is logging in as the SFADMIN user and making changes to employee data. Is there a way we can get a report to show user login locations?