SQL Server Security Audit (Part 3) - Operating System Level Audit

Typically, most DBAs have remote access privilege to the Windows machine hosting the database server. If you have administrator privilege in the Windows box (or VM), you can take some time to try the following:

The article continues at http://www.sql-server-performance.com/articles/audit/security_audit_operating_system_p1.aspx