Windows Server Change Control and/or Monitoring

Are there any tools or techniques or best practices for managing and controlling change on windows servers.  I am concerned that not all domain administrators in my domain are following my requirment that ALL changes be documented in a change document for each server.  I have noticed some bad wholesale security changes.

How can I find out when/by whom AD, File Security, and/or Configuration changes were made?

Is there software for tracking/auditing this?

Thank you.

PS - I have an SBS 2003 SP1 domain with 10 member servers and 60 users (all XP Pro).
Who is Participating?
Shift-3Connect With a Mentor Commented:
You can enable auditing to track who changes what.  It's important to test these settings carefully though, as auditing too many things can cause performance problems.
Forced accept.

EE Admin
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.