Related Products

Active Directory change auditing

Reinforce holistic security around Active Directory with continuous monitoring and reporting on all critical changes made to AD objects and their attributes, Group Policy, and more.

View details on the what, when, who, and where of changes using ADAudit Plus

Enhance AD visibility

Track and report on every change made to a multitude of AD objects including users, groups, OUs, computers, Group Policy Objects (GPOs), sites, FSMO roles, and more.

Audit user account management

Audit every change made to your user accounts, including creation, deletion, rename, and password change events along with the creation of user accounts whose passwords are set to never expire.

Track GPO setting changes

Quickly capture all GPO modifications along with changes made to their settings, and monitor the account lockout policy, password policy, and more along with their original and current values.

Scrutinize permission changes

Track and investigate sudden permission changes at the domain, OU, GPO, group, computer, and user levels along with the old and new access-control list (ACL) values.

Enhanced threat detection with Active Directory change auditing software

Avoid excessive permissions

Proactively track and analyze every time a user is added or removed from a security group, and thwart unwarranted accesses and privileges that could be gained.

Track high-risk AD changes

Selectively track and notify admins on critical AD changes such as schema or configuration changes, and send instant email/SMS notifications to admins.

UBA-driven threat hunting

Trigger instant email/SMS alerts to prompt immediate action to atypical user behavior such as an unusual volume of user management activities or unusual user activity time.

Azure AD change intelligence

Check out the consolidated audit data across both cloud and on-premises environments from a single console with additional details on who changed what, when, and from where.

Audit Active Directory changes to strengthen AD security and
stay in compliance

AD change auditor
Manage AD change alerts
Proactive threat protection

1

Security preconfigured

Use our library of over 50 predefined alert profiles to notify admins about critical changes to domain policies, admin groups, configuration permissions, and more.

Security preconfigured
Use our library of over 50 predefined alert profiles to notify admins about critical changes to domain policies, admin groups, configuration permissions, and more.
1

Powered by machine learning

Reduce the risk of insider threats by monitoring the typical pattern of behavior for every employee to spot any abnormal actions instantly.

Powered by machine learning
Reduce the risk of insider threats by monitoring the typical pattern of behavior for every employee to spot any abnormal actions instantly.
1

Track administrative user actions

Monitor and gain an overall perspective of AD changes to users, groups, computers, organizational units (OUs), and more by a privileged user.

2

Audit ready reporting

Stay in compliance with GDPR, PCI DSS, HIPAA, CCPA, and other regulations with our out-of-the-box audit-ready compliance reports.

Track administrative user actions
Monitor and gain an overall perspective of AD changes to users, groups, computers, organizational units (OUs), and more by a privileged user.

A small sample of our more than 200 reports to track all AD changes

User Logon Reports
Logon Failures Logon Failures based on users Failures due to Bad Password Users First and Last Logon By Computers Failures due to Bad User Name Logon Activity based on DC Logon Activity based on IP Address Domain Controller Logon Activity	Member Server Logon Activity Workstation Logon Activity User Logon Activity Recent User Logon Activity Last Logon on Workstations User's Last Logon Users logged into multiple computers
Local Logon-Logoff
Currently Logged On Users Logon Duration Local Logon Failures Logon History Terminal Services Activity	Users Logon Duration on Computers Interactive Logon Failure Terminated Users Session RADIUS Logon Failures (NPS) RADIUS Logon History (NPS)
Account Management
All AD Changes All AD Changes By User All AD Changes on DCs User Management Group Management	Computer Management OU Management GPO Management Administrative User Actions
User Management
Recently Created Users Recently Deleted Users Recently Enabled Users Recently Disabled Users Recently Locked Out Users Recently Unlocked Users Frequently Lockedout Users Recently Password Changed Users Frequently Unlocked Users Recently Password Set Users	User Based Password Changes User Based Password Reset Password Never Expires Set Users Recently Modified Users Extended Attribute Changes User Attribute New and Old Value Account Lockout Analyzer Last Modification on Users User Object History
Group Management
Recently Created Security Groups Recently Created Distribution Groups Recently Deleted Security Groups Recently Deleted Distribution Groups Recently Modified Groups Recently Added Members to Security Groups	Recently Added Members to Distribution Groups Recently Removed Members from Security Groups Recently Removed Members from Distribution Groups Extended Attribute Changes Group Attribute New and Old Value Group Object History
Computer Management
Recently Created Computers Recently Deleted Computers Recently Modified Computers Recently Enabled Computers	Recently Disabled Computers Extended Attribute Changes Computer Attribute New and Old Value Computer Object History
OU Management
Recently Created OUs Recently Deleted OUs Recently Modified OUs	Extended Attribute Changes OU History
GPO Management
Recently Created GPOs Recently Deleted GPOs Recently Modified GPOs	GPO Link Changes GPO History
Advanced GPO Reports
Group Policy Settings Changes Computer Configuration Changes User Configuration Changes Password Policy Changes Account Lockout Policy Changes Security Settings Changes Administrative Template Changes	User Rights Assignment Changes Windows Settings Changes Group Policy Permission Changes Group Policy Preferences Changes Group Policy Settings History Extended Attribute Changes
Other AD Object Changes
Password Settings Object Changes Recently Created Containers Recently Deleted Containers Recently Modified Containers	Containers Permission Changes Recently Created Contacts Recently Deleted Contacts Recently Modified Contacts
Configuration Auditing
Schema Changes Schema Permission Changes Configuration Permission Changes	Configuration Changes Site Changes
Permission Changes
Domain Level Permission Changes OU Permission Changes Container Permission Changes GPO Permission Changes User Permission Changes	Group Permission Changes Computer Permission Changes Schema Permission Changes Configuration Permission Changes DNS Permission Changes
DNS Changes
DNS Nodes Added DNS Nodes Removed DNS Nodes Modified DNS Zones Added	DNS Zones Removed DNS Zones Modified DNS Permission Changes
Removable Storage Audit
All File or Folder Changes File Read	File Modified File Copy and Paste
Domain Object Changes
Domain Policy Changes Changes to Domain DNS Object	Domain Level Permission Changes
Profile Based Reports
Profile Based Reports Create a New Report Profile with reports from any of the above Active Directory audit reports. Select the object actions to be audited. Further, select the Domain and the object within to be associated with the report profile.
My Reports
My Reports Any Active Directory report required for a constant monitoring can be added to My Reports, more like bookmarking a report for a very quick find.

Prove IT compliance and detect insider threats using ADAudit Plus'
AD change auditor

Get your free trialfully functional 30-day trial

Keep your Active Directory, Windows servers, and workstations secure and compliant with ADAudit Plus

Active directoryFile serverWindows serverWorkstation

Audit changes

Receive real-time notifications on changes occurring across both on-premises and Azure Active Directory.

Track user logons

Gain complete visibility into user logon activity, spanning from logon failures to logon history.

Troubleshoot account lockouts

Detect lockouts instantly and know their root cause by tracking down the source of authentication failure.

Monitor privileged users

Get a consolidated audit trail of administrator and other privileged user activities.

Audit Windows servers

Monitor local logon/logoff activities; changes to local users, groups, user rights; and more.

Track employee productivity

See the amount of time employees spend at their workstations.

File server auditing

Audit all file accesses across Windows file servers, failover clusters, NetApp, and EMC environments.

File permissions auditing

Audit all file and folder permission changes. Know who made those changes, when, and from where.

File integrity monitoring

Monitor and alert on unwarranted file accesses or modifications with real-time change auditing.

File change monitoring

Gain instant visibility into all modifications and failed access attempts made to your critical files.

Compliance requirements

Generate out-of-the-box compliance reports for regulations such as HIPAA, PCI DSS, GDPR, and more.

Forensic analysis

Investigate security incidents faster with actionable and accurate audit data.

Windows server auditing

Audit and monitor all user actions across the Windows server environment in real time.

Removable device auditing

Monitor usage of removable storage devices, such as USBs, and report on their file activities.

Printer monitoring

Monitor printer usage to find out who printed what critical files over the Windows network.

ADFS auditing

Monitor and report on both successful and failed ADFS authentication attempts in real time.

Audit process tracking

Track critical process creation and termination events with details on who initiated it and when.

File integrity monitoring

Monitor and alert on unwarranted file accesses or modifications with real-time change auditing.

Workstation auditing

Audit, alert, and report on critical user activities across workstations in real time.

Logon and logoff monitoring

Monitor and track all users' logon and logoff activities to spot anomalous user sessions.

File integrity monitoring

Ensure file integrity by keeping track of changes made to the system, program files, and more.

User login history monitoring

Track, record, and maintain an audit trail of all users' login history details.

Audit process tracking

Track critical process creation and termination events with details on who initiated it and when.

Employee time tracking software

Measure your employees' productivity by keeping track of their idle time and actual work hours.

Active Directory change auditing

View details on the what, when, who, and where of changes using ADAudit Plus

Enhance AD visibility

Audit user account management

Track GPO setting changes

Scrutinize permission changes

Enhanced threat detection with Active Directory change auditing software

Avoid excessive permissions

Track high-risk AD changes

UBA-driven threat hunting

Azure AD change intelligence

Audit Active Directory changes to strengthen AD security and stay in compliance

Security preconfigured

Powered by machine learning

Track administrative user actions

Audit ready reporting

A small sample of our more than 200 reports to track all AD changes

User Logon Reports

Local Logon-Logoff

Account Management

User Management

Group Management

Computer Management

OU Management

GPO Management

Advanced GPO Reports

Other AD Object Changes

Configuration Auditing

Permission Changes

DNS Changes

Removable Storage Audit

Domain Object Changes

Profile Based Reports

My Reports

Prove IT compliance and detect insider threats using ADAudit Plus' AD change auditor

Keep your Active Directory, Windows servers, and workstations secure and compliant with ADAudit Plus

Audit changes

Track user logons

Troubleshoot account lockouts

Monitor privileged users

Audit Windows servers

Track employee productivity

File server auditing

File permissions auditing

File integrity monitoring

File change monitoring

Compliance requirements

Forensic analysis

Windows server auditing

Removable device auditing

Printer monitoring

ADFS auditing

Audit process tracking

File integrity monitoring

Workstation auditing

Logon and logoff monitoring

File integrity monitoring

User login history monitoring

Audit process tracking

Employee time tracking software

Meet all auditing and IT security needs with ADAudit Plus.

A single pane of glass for complete Active Directory Auditing and Reporting

Audit Active Directory changes to strengthen AD security and
stay in compliance

Prove IT compliance and detect insider threats using ADAudit Plus'
AD change auditor