Alternative to Quest ActiveRoles (now Dell) ?

[tango]

Hi,

 

I'm currently investigating alternatives to Quest ActiveRoles for managing our AD environment of approx 30000 accounts. Basically for auditing , web front end , scripting of account creation , workflows for approval , dynamic groups based on attributes and ideally self service password reset.

 

Just wondering if anyone had any recommendations ? Softerra Adaxes looks promising but I've haven't delved too deep just yet.

 

Any suggestions would be welcome.

 

Thanks

 

tango