|Not just anyone should be able to do that. If so limit it.|
Might have to monitor the privilege level.
Might be possible to write code to monitor it and report it to log.
"Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10