Active Directory Auditing software

[Angrybird]

I want to track all my AD logs also It should give full audit of changes/modifications/deletions made to active directory and can I filter these changes by administrator who made them?
Any Input would be appreciated

 

[DelJo63]

On the AD Server, locate the log(s) of interest

• right-click->properties->Security Tab
• click Advanced button at the bottom
• on the Auditing Tab click Add
• insert user id or group id to monitor
• scroll to find Create Files / Write Data [x] and
• Create Folders / Append Data [x]

audit will be in the Event Viewer and there are scripting tools to extract specific events of your choice

 

[Angrybird]

For this I think we can only monitor single user or group user's activity
what if we have number of computers and over 1500 users in the network Then I need to apply this setting for each user or any other way aground is there ??

 

[DelJo63]

changes/modifications/deletions made to active directory

those changes would be on the AD Server itself, not the client systems