Active Directory auditing and reporting is a critical procedure for tracking unauthorized changes and errors to Active Directory and Group Policy configurations. One single change can put your organization at risk, introducing security breaches and compliance issues.
Built-in Active Directory auditing lacks many important features, provides cryptic GUID and SDDL information, and doesn't have any reporting capabilities. Careful analysis and cross-referencing of multi-megabyte security logs containing excessive amounts of log 'noise' can take enormous resources and still never paint the whole picture.
Netwrix Auditor provides configuration auditing (change and "state-in-time" auditing) for security and compliance of your Active Directory. Powered by AuditAssurance™ technology, the product features Active Directory change auditing capabilities and automatically creates reports and real-time alerts that show WHO changed WHAT, WHEN and WHERE, for all changes, including user and administrative activity, in a human-readable form. It also allows reporting on Active Directory contents ("state-in-time" auditing), such as "All Members of Domain Admins group", etc., both on the current state and on historical data, e.g., "All members of Domain Admins group as of December 31, 2010."
Netwrix Active Directory auditing software features report subscription capabilities that allow for configuration of scheduled report delivery. The change audit reports list additions, deletions, and modifications made to Active Directory users, groups, computers, OUs, group memberships, permissions, domain trusts, AD sites, FSMO roles, Group Policy objects and settings, AD schema, and all other types of objects filling the many major gaps found in native Active Directory auditing.
The modification events indicate "before" and "after" values for all modified settings - for example, the previous name of a recently renamed user or OU permissions before they were changed - in a single, easy-to-comprehend record for each change.
This software is not reviewed yet.
Netwrix Event Log Archiver is a free tool to automatically consolidate and archive Windows event logs across the network. The tool collects and consolidates event logs from multiple servers and archives them in a central location.
Netwrix Change Notifier for Windows Server is a free auditing tool to monitor server configurations and automatically document changes, including installed software and hardware, local security settings, and registry settings.
Netwrix Change Notifier for Active SQL Server is a free tool to audit and report on administrative changes made to server configurations and databases: users, roles and schema changes.
Netwrix Change Notifier for VMware is a free tool that audits changes to VMware host and virtual machine settings, creation and deletion of virtual machines and sends you audit reports via email.
Netwrix Change Notifier for File Servers is a free tool to audit file server changes. The tool sends daily reports about all file server changes: file and folder changes, shares, and permissions with previous and new values of configuration values.