My laptop was recently stolen.

It was a corporate system running XP, which means it was part of a domain - I'm assuming that makes it impossible for someone to log into it, although I know there are ways to reset the local admin account. Is there any way to tell if someone boots it up?

I was logged into gmail, using two factor authentication. I will change my password, but is there any chance of tracking any attempted accesses?

Other than changing passwords on all my web accounts, is there anything else I need to do?