All I have is just a Word Document inside the CD.
My company purchased an SQL Server a long time. We contacted the ex-employee and he mentioned to us that the license can be found inside the SQL Installer CD.
When we opened the SQL CD, we saw the license file. It was just a simple word document which can be edited, copied and easily distributed. There was no reference to our company name or any signatures in the license.
So, If Microsoft actually audits us, how would they know that our SQL Copy is genuine?
As far as the auditing part of your question goes:
Based on past experience with Microsoft auditing Office product installations at a previous employers company. They will come in, and either request an audit of the machines on the network or perform one themselves. They will then take the total number of installations found, and ask to see evidence (be it purchase orders, receipts etc) to account for that number of installation.