Auditing Add/Remove Windows Component Events?

How do I set up Windows (especially 2003 Server) to record Add/Remove Windows Component events? For example, if IIS is uninstalled, how can I determine who uninstalled it? By default, nothing definitive seems to be recorded in the Event Log; is there any other way?