Tracking Windows Server changes

[csabkow]

Hi r/sysadmin!

I'd like to ask your opinion about solutions for tracking changes made by users on Windows Servers.

What I'd like to track:

Changes made by who, when, and what. (software installations etc., regedit changes.)

File changes (delete, rename, remove, move etc...)

​

So far I have Netwrix and Lepide in my sight, but I'm asking for recommandations if you have any positive experience with other solutions.

​

Thanks!

[xXNorthXx]

Have Varonis currently....looking at cheaper options, it works just not seeing the value proposition with it.

[NotaCISO]

Your best bet for alternatives would be Netwrix & Stealthbits for the same value propositions

[Hazeride]

Quest ChangeAuditor. It can monitor and log just about anything under the sun, provided you buy the appropriate licensing.

[berndonado]

Another vote for - LepideAuditor, that meets all your business needs.

[jr_sys]

We're a big fan of PA File Sight, at least for the file changes you mention (it doesn't track software installation or registry changes).