Search:

Thanks cgk, memory was rusty on that part :)

No, thus why I said 3rd party software must also be included. However, we were leaning more towards the default capability of Windows. And as for file/sys auditing, it's so fscked up on timestamps...

Sadly, windows leaves very few logs of it's activity. A firewall should keep logs, and if you are running a 3rd party server then it too should leave logs (as long as you enable that option).
...