why wouldn't you disable root login and only use sudo with command logging enabled.
http://aplawrence.com/Basics/sudo.html
EDIT: noticed the 'root', making a new assumption this is a windows server box.
http://aplawrence.com/Basics/sudo.html
EDIT: noticed the 'root', making a new assumption this is a windows server box.
Without going into operational specifics, the answer is that this doesn't scale.