Need a AD Monitoring tool consist of at least these features
1. Real-time notification of important changes to Active Directory (e.g. Joe was added to Domain Admins)
2. Real-time notification of security thresholds exceeded (e.g. 10 user account lockout events were seen in the last 5 minutes)
3. Real-time notifications of group policy changes (e.g. Joe just modified the Default Domain Policy + What changed)
4. Long term storage of all (or at least all interesting) AD changes (e.g. Joe's account was disabled by Tom on 10/3/2013 at 4:50PM or Joe was added to Domain Admins by Tom on 10/1/2013 at 10:01AM
1. Real-time notification of important changes to Active Directory (e.g. Joe was added to Domain Admins)
2. Real-time notification of security thresholds exceeded (e.g. 10 user account lockout events were seen in the last 5 minutes)
3. Real-time notifications of group policy changes (e.g. Joe just modified the Default Domain Policy + What changed)
4. Long term storage of all (or at least all interesting) AD changes (e.g. Joe's account was disabled by Tom on 10/3/2013 at 4:50PM or Joe was added to Domain Admins by Tom on 10/1/2013 at 10:01AM