In the Advanced Security Options, you can configure auditing...
You have to specify the user group, you want to audit... After that, you can specify in detail what you want to audit, like in setting NTFS permissions on a file or folder.
The audit will then be in the Eventlog.
I don't know if you will be happy with that.