Write something to track activities on a windows server

hello I sell windows RDP slots and admin plans are a big seller but with endless abuse isu's (to be expected) I need a way to track admin class users doing a few things they shouldn't be deleting files/folders they do not own shutting down programs that are not running in there account loging other users off deleting or making windows user accounts just looking at event logs is not enough some users are smart enough to delete them and also there is a time limit on how long logs are saved and some times I don't learn of the problem fast enough so this would need to be an ap that runs by the system not by any one user (so auto active on a reboot) and it would need to log these activities somewhere that an abusive admin user would not think to look and delete