One of the colleagues on my team - Eric Fitzgerald, the "Windows Auditing" expert (he /is/ the Windows auditing team) - is also blogging. If you're interested in reading explanations about security event numbers and some tid-bits on planned Windows auditing fixes and improvements in W2K3 Server SP1 or Longhorn, check out his "Windows Security Logging and Other Esoterica" blog.