Can someone recommend a good security audit tool for Active Directory? We have found several accounts with inappropraite permissions and I am looking for a comprehensive toolkit that allows both a spot audit and a platform for ongoing notifications for business rule matches.
I am running an AD 2003 domain at the 2000 functional level. Single forest and domain.
Thanks.