I need to track who and when changes are being made to network adapter settings. Specifically the dns settings. I can prevent standard users looking at the settings but any admin can look and make changes. This is OK but I need to discover which admin made changes. I maintain a small publicly available system of 10 pc's using win 7 enterprise and our router does not allow global changes to DNS, thus, to secure against dodgy content I control using local dns settings. However, some admins may out of misplaced sympathy to a user may change the dns and then change back. I need to know when and who makes these changes. Such is the way of a voluntary organisation. Any ideas?