Users may not be aware that the Windows Server 2003 defaults do not include the right auditing settings to make this tool effective.