I am looking for a product to monitor and track changes in active directory. I want to track changes in GPOs. What the changes were, when they were made and who made them. I would also like to capture these changes in GPOs to roll back to at a later date. I would also prefer to use software that is gov't common criteria certified if possible. Any suggestions or experience in this realm?
I haven't deployed any tools that monitors active directory use or change, but I am certain that the SW offers a free Tools Trio for Use with Microsoft AD.