You can also set up a rule in the Intelligent Router module of CSM, if you have it, to record select extensions, but keep in mind that will tie up VM ports while it's recording. You can set rules to only record calls from specific AC or customer. And you can cause them to record into a different mailbox from the user. You may want to turn off the recording message display so the user doesn't know he's being recorded.