Home :: Products :: Active Directory :: Active Directory Change Tracker

Active Directory Change Tracker

2.5

Vyapin Active Directory Change Tracker performs a complete change audit of your Active Directory - tracks, analyzes and reports all changes made to your Active Directory configuration. The tool audits all changes made to your Active Directory by periodically collecting only the changed data, reporting what exactly changed, along with the new and old values, when the change was made, where the change happened in your Active Directory and the tool also determines who made the change by looking up the Security Event logs of your audit-enabled Active Directory.

Share Active Directory Change Tracker Tool

Track all changes to your Active Directory

Find out the What, When, Where and Who of changes made to the Active Directory

Track critical changes in AD through Event IDs

Real time Alerts to help you proactively manage inadvertent changes

At a glance...

Change History for compliance and forensic analysis

Create and maintain an Events History database of your AD

Analyze, troubleshoot and recover

At a glance...

Screenshot...

Audit AD and track changes

Why Active Directory Change Tracker?

Active Directory Change tracker records and maintains the entire history all tracked changes, along with the relevant Event log data, in a SQL server database for future reference and analysis. A powerful search tool helps you analyze all past changes on any predefined search criteria. Changes can be selectively tracked on OUs and other containers with several different delivery options in the form of reports, export and email.
Active Directory Change Tracker may be configured to work with or without the native Auditing capabilities of Active Directory. You can use the tool to track and audit AD configuration changes on what exactly changed even without using the native auditing of AD. You can additionally combine the tool with the default native auditing of AD to capture Security event log audit records of changes from all domain controllers in your domain (since event log data is not replicated). Thus, the tool gives you the choices to have complete control on how you would like to track and manage changes to your Active Directory.
Change Management is a critical component in Enterprise systems management and is also required to meet your organization’s compliance and regulatory needs such as SOX and HIPAA. Vyapin Active Directory Change Tracker serves the demanding needs of tracking and maintaining records of critical changes to Active Directory and is a must-have tool for Active Directory administration.

Highlights

Accomplish more with less of your time and every dollar of your investment. Here is a summary of what you can do with this product solution:

Track and audit all changes made to Active Directory, across your enterprise. Track changes to critical OUs and containers.	Track changes with or without using Active Directory’s native auditing capabilities. To see the pros and cons of using Active Directory’s native auditing. Click here...
Efficient data collection. Only incremental Change data is collected during each run. Creates almost no additional load on the domain controllers.	Store several years of Change data in a SQL database for security, compliance and regulation purposes.
Search your entire Change History using powerful Search criteria – search for additions, deletions and modifications on specific users, groups, OUs, object property values etc.	Get Real Time Alerts through emails about events in your Active Directory, as it updates you as soon as they occur. These alerts notify you instantaneously as events are registered in the Security Log of domain controllers helping you secure your Active Directory.
Security event log data collection for the configured event IDs.	Search your entire Events History using powerful Search criteria - search for event IDs, date range and domains.
Reports the events data for AD object changes (created/modified/deleted objects), User logon/logoff activities, Password changes and Terminal Services activities (User disconnected and re-connected to the session.) from the occurrence of specific Event ID(s) in domain controller(s).

What's New in ?

Provision to run ADCT Listener Service using a different user account other than the currently logged on user account. This enables seamless reporting of Change made by user information.

Provision to Edit or Delete multiple Events in Alerts Dialog.

Improved performance in enumerating Active Directory objects for every snapshot, while performing Track Changes.

Fixed to retain the Additional change data settings to report Change made by and Change made on information from Security event log (previously, the settings is always left in unchecked state).

Read Release Notes

Take a tour

Watch this Active Directory Change Tracker video to see for yourself its capabilities and potential in serving your needs of tracking and auditing the Active Directory.

Supported Platforms

Read System Requirements

Pros & cons of Active Directory auditing

Active Directory audit events are stored in Security event logs in domain controllers. The number of events generated generally depends on the number of audited objects and the SACLs set on the objects. Event logs grow in size very quickly over a period of time and require constant cleanup and backup. Event log data is not replicated across domain controllers and hence it is necessary to gather event log data from all the domain controllers in order to get all the audited events archived in one place. Enabling audit always produces some load on the domain controllers and hence auditing must be restricted to the most critical and essential objects in your Active Directory. However, auditing critical objects do give you the benefit of accurate and detailed data in real time (who accessed what and when).
If auditing is carefully done on select objects for Access as well as Changes, it can be really useful to track down security issues in your Active Directory. But, gathering this data from all the domain controllers will require additional tools. If you enable audit, you must be clear on what to audit keeping in mind the security needs of your organization. You must not use auditing as a means to track down all accesses and changes to your Active Directory. Otherwise, you will end up with plenty of noise in your Security event logs and the size of your logs grow very quickly. This also places a significant load on your Domain controllers thereby affecting performance. Restricting your log size may help, but will require constant back up of your logs to prevent loss of data.
Active Directory Change Tracker tracks all changes to your AD without depending on the native audit capabilities of AD. You will need native auditing only if you need to find out who made the change and the most accurate time the change happened. You can combine native auditing with Active Directory Change Tracker to report this information and keep this archived in the tool’s Change History database.
In a nutshell, enable your AD auditing for critical changes in your AD and use Active Directory Change Tracker to scan your security event logs in all your domain controllers to extract detailed information on each changes made, including who made the change along with the most accurate time of change. If you are interested to track only what changed along with the new and old values, then you don’t have to enable AD auditing. You can simply rely on Active Directory Change Tracker to track all your changes.

;