Ya know, if it's a small company with limited programming skills, use something prebuilt. (e.g. PennyWize and Password Sentry)

If you feel like you can do it, build it or hire someone to build it... See, Was that so hard? :specs: