We have an employee who we know is accessing files and trying to crack
passwords for word and excel documents.  I was able to view all system
folders and see the 'recently used documents' folder in his profile. 
I also noticed that password detection programs had also been downloaded and
accessed.

I am concerned with the Windows XP IMAPI CD-Burning COM Service being
installed by default if that employee had transferred any files to cd
to take home and try to access.

MY QUESTION:  How can I access a log of all files that have been
transferred using the IMAPI CD-Burning COM Service within Windows XP?

Thanks.

Gregory Smith