It's easier than all that. Call up Microsoft. Let them know they should start a license audit. MS has audit clauses in everything they do. Make sure MS keeps your name quiet and let the audit firm deal with management. Much more fun to watch auditors make managers squirm.