VSI has configuration audit policies for many different DISA STIG guidelines.
Audit files are available for several different Microsoft technologies including:
Windows XP Pro
Windows 2003 Server
Windows 2008 Server
Windows MS-SQL Server
Operating system audits test recommended configuration settings such as registry values, permissions of users, group policy, active processes and more. SQL server audits test both the underlying Windows operating system as well as the specific configuration of the various SQL tables and internal settings.