What is a good tool to monitor certain Active Directory changes? For example: We would like to see a weekly report of: newly created users, users added to groups, locked out users, domain admins.
SnapOverflow
What is a good tool to monitor certain Active Directory changes? For example: We would like to see a weekly report of: newly created users, users added to groups, locked out users, domain admins.
I think in this case scom with ACS is a good solution.
Microsoft Active Directory Explorer allows you to take snapshots of Active Directory and compare them. I'm not sure if you can use it to automatically generate reports periodically, but it is a nice tool for monitoring changes at all levels.
If you are into scripting, you may be able to use dsquery to get the specific info you need. See the answer to this other question for an example.