You can Monitor IIS Configuration Changes using SAM via event logs by ensuring that you enable the EVENT LOGS first for IIS Configuration changes:
Enable the IIS configuration change to be written on Event Logs
1. Go to Start > Event Viewer.
2. Expand Applications and Services Logs > Microsoft > Windows > IIS-Configuration > Operational > Enable Log.
3. Close Event Viewer to Finish.
Then you may now IMPORT the attached SAM Templates and create a component monitor alert so you will know which IIS Configuration has been changed:


BR,
Mat