Notice: will be retired soon. Please visit our new site at

Auditing & Alerting

Active Administrator enables you to quickly and accurately recognize changes that occur in Active Directory. An audit agent tracks changes that occur in Active Directory by actively monitoring the security of event logs on each domain controller where it is installed. Upon finding an event of interest, the audit agent sends the information to the auditing database. From the auditing database, you can filter results, save reports and more.

One database for everything

Active Administrator’s single database simplifies Active Directory management. The database stores changes made to Active Directory, Group Policy and Active Administrator itself. The database also stores reports, alerts, AD archives and more.

Find exactly the events you want to review

Event filtering allows you to find the exact audit data you are looking for. The audit filter allows you to filter in the search, segmenting data by date/time range, acting user, event, domain controller, event description, event log ID, affected object location, affected object type, failure/success, event tags, comments, masks and attributes. You can also tag, group and comment on events.

Get the reports you need

The reporting feature allows you to save, organize and export audit data into an easily accessible format. Active Administrator comes with a number of out-of-the-box reports, but you can also customize your own reports. Reports can be categorized for more efficient organization.

Schedule reports for automatic generation and delivery

The Report Scheduler is a convenient and consistent way of distributing and receiving audit reports. The feature allows you to schedule reports for one-time, daily, weekly or monthly generation, in any of a variety of file formats. The reports are delivered via email or directly to a folder.

Get alerts about AD changes

Active Administrator notifies you of Active Directory changes, allowing you to quickly take action. It also provides a history of alerts that were activated, allowing you to track which alerts occur most frequently. Creating an alert is as simple as selecting an event definition and populating an email address. You can also configure alert quiet times, thresholds and filters.

Respond to alerts automatically

Automatic actions allow instant response to Active Directory changes. As soon as an alert is triggered, Active Administrator will enable a program or script. This helps ensure that no matter the location of the administrator, the proper response will occur automatically.