I haven't managed a Win32 system since way back in the day but I seem to recall that you can get some of this from the security log...though I might just be getting old ;-)

Anyway, I have been looking at the Win32:: modules on CPAN lately to think about how I could manage my access to shares on our network and I noticed there is a module Win32::EventLog that allows you to access the event logs.

Hope this gets you started in the general direction you are seeking.