I can recommend NetWrix Active Directory Change Reproter. My company uses it, and it audits all changes made to AD, sending automated reports and real-time alerts highlighting details about each change—e.g., it tells me exactly what changed, who made each change, and when the change occurred. http://www.netwrix.com/active_directory_change_reporting_freeware.html