I'm trying to identify potential permission issues on areas of our AD tree. What I have in mind is something like SysInternals FileMon to monitor object access in Active Directory in real time.
For example: Adding a computer to the domain.
Is there anything like that in the wild? Is there a better way?