Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is a good tool to monitor certain Active Directory changes? For example: We would like to see a weekly report of: newly created users, users added to groups, locked out users, domain admins.

share|improve this question
up vote 0 down vote accepted

Microsoft Active Directory Explorer allows you to take snapshots of Active Directory and compare them. I'm not sure if you can use it to automatically generate reports periodically, but it is a nice tool for monitoring changes at all levels.

If you are into scripting, you may be able to use dsquery to get the specific info you need. See the answer to this other question for an example.

share|improve this answer

I think in this case scom with ACS is a good solution.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.