Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

What is a good tool to monitor certain Active Directory changes? For example: We would like to see a weekly report of: newly created users, users added to groups, locked out users, domain admins.

share|improve this question
add comment

3 Answers

up vote 0 down vote accepted

Microsoft Active Directory Explorer allows you to take snapshots of Active Directory and compare them. I'm not sure if you can use it to automatically generate reports periodically, but it is a nice tool for monitoring changes at all levels.

If you are into scripting, you may be able to use dsquery to get the specific info you need. See the answer to this other question for an example.

share|improve this answer
add comment

I think in this case scom with ACS is a good solution.

share|improve this answer
add comment

I would suggest to use saved queries in Active Directory Users and Computers. Also more third party tools like manageengine,netwrix, maxpowersoft, adsysnet, etc available.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.