Active Directory Change Tracking

Question

Hi Guys I am going to develop an application which will monitor changes in Active Directory. I will either use Change Notification control or DirSync control. I want to track the What Who When  Where of each changes. I can get What ( is changed) by using any of the technique( change notification or DirSync) but none of these technique tells us that who made the changes where changes were made and When. Can you please let me know any way to find out these information about each change? I know one solution could be to turn on domain controller auditing and read these infromation from event logs but i don't want to use this approach. Thank You -Akhtar

andrew camary · Answer

So what you actually want from our side ? For introduction and background information you can refer to this informative Code-project article that seems a nice approach to meet with your expectation : http://www.codeproject.com/Articles/1002714/Active-Directory-change-tracking As an administrator I use both PS command and an automated tool too. And in order to track Active Directory changes in my environment I give preference using Lepide active directory auditing tool that provides an automated solution and helps to track every critical events into real time. Even you can fetch the data at granular level to find out the actual culprit.