Auditing changes in Regional Options

From: Hein Olivier (hein.olivier_at_ast.co.za)
Date: 05/06/03 

Date: Tue, 6 May 2003 06:11:55 -0700

Hi there,
I've got a problem with a users W2k PC where the Short
date format changes from yyyy/mm/dd to mm/dd/yy (in the
Regional Settings) at a random time during non-working
ours. Even if we correct the date format the problem
reappears after a time. I'm would like to audit/monitor
the changes and try to find out the cause of this change.
I'm not sure what audit policy to use or how to set it up
to look for this specific change. Any suggestions in how I
must go about and audit this change?
Thanks