Poskazhite software for auditing changes in Active Directory?

Question

Microsoft

The question arose about the need for a convenient centralized audit of changes in Active Directory. EventLog Forwarding - do not offer. We need a convenient, fast interface to determine who, when and what changes were made.
Main software requirement:
Ability to track changes to non-standard attributes and objects of non-standard classes (there are several non-Microsoft schema extensions).

Answer 1

In my experience - unequivocally a solution from netwrix NetWrix Active Directory Change Reporter

Ability to monitor changes to non-standard attributes and non-standard class objects (there are several non-Microsoft schema extensions).

from the description — Other types of changes to all types of AD
objects
I compared many solutions - this is the best to date, I highly recommend it.

Answer 2

from the description - Other types of changes to all types of AD objects

Thank you. I must have overlooked this place.

There is a free version (of course truncated)

Buying is not a problem - the main thing is to justify the choice.

I compared many solutions - this is the best to date, I highly recommend it.

If it doesn’t make it difficult, can you voice the main advantages over competitors in your opinion?
And, as I understand it, you are using this product, do you need to enable and configure Active Directory auditing to collect data about the changes made?

Answer 3

The program deploys in minutes. I audit as AD. so does GP. I keep archive for 12 months. I shoot reports from reporting services.
What pleasantly surprised me:
-Convenient, simple and at the same time simple interface
-Wide change monitoring and notification functionality (there are real-time and scheduled ones)
here is an example of changes in my AD

-Easy change control

Answer 4

It all depends on the replication settings within the forest. And so, I did not notice any problems, I have been using it for more than a year. normal flight excellent.

Answer 5

netwrix