I have a bunch (23) of servers running on win 2008 and 2012
all told around 50 people needing admin access

and people keep making changes that they do not have permission to make
I need a quick way to track who did what

my main interests are changes to
- Group policy
- programs installed
- programs removed
- Programs closed
- new user accounts made

is there some program I can install that would give me quick simple access to this info ?