Active directory security audit software

Question

Can someone recommend a good security audit tool for Active Directory? We have found several accounts with inappropraite permissions and I am looking for a comprehensive toolkit that allows both a spot audit and a platform for ongoing notifications for business
rule matches.
I am running an AD 2003 domain at the 2000 functional level. Single forest and domain.
Thanks.

Answer 1

Hi,
I would look at the ACS feature of Operations MAnager 2007 R2:
http://technet.microsoft.com/en-us/library/bb381258.aspx
This works in conjunction with the audit policies configured for the
domain and the domain controllers to centralize security related events.
See also,
Auditing Security Events
http://technet.microsoft.com/en-us/library/cc776394%28WS.10%29.aspx
Auditing Policy
http://technet.microsoft.com/en-us/library/cc779526%28WS.10%29.aspx
-- Mike Burr