using rebol as an audit tool for admin account activity?

[martnp]

Hi all,
I really hope I might be able to find a solution for my problem here after a referral from someone on another forum...
I'm not really big on programming/scripts so I do very much apologise, I'm hoping I could detail the situation and find out if rebol could be the solution.
I work on a helpdesk at a major blue chip company. On one domain we are local admins, on the other we're not (without going into detail/politics etc.)
To try and get local admin permissions throughout I need to provide a means of auditing activity such as using remote registry and connecting to a remote machine by using C$ admin share from Run etc.
The only solutions we've been able to find involve a lot of costs and rolling out software to all machines (over 10,000!).
What I wanted to find was something that would maybe be on all helpdesk machines or a dedicated machine that could audit activity somehow.
The network is not active directory, it is mostly NT4 machines and some XP.
On each machine the Administator local group contains 2 global groups, one is tech support, the other is desktop support. To be local admin on all machines you have to be in one of these two global groups. This could either be all helpdesk ids or a generic id that could be used by all analysts on their machines or on a dedicated machine?
Any ideas on a possible solution? We currently use a web based interface to do user account administration (used to use things like NT User Manager) including password resets/unlocks/drive access etc etc. I thought some sort of GUI/web based tool could be used. I can't think of any easy way of incorporating the ability to remotely log on to a machine using our remote control software in order to use admin rights to repair software/increase virtual memory etc.
I'm really stuck with this, any ideas at all would be really appreciated...