Quest® InTrust® Plug-in for Active Directory provides comprehensive, detailed, real-time auditing and approval of all changes to AD and Group Policy Objects (GPOs), including changes to AD configuration, mailbox permissions and GPO settings. Quest InTrust Plug-in for Active Directory provides all information behind important changes, including who made the change, where they made the change from and the before and after values.

In addition to tracking all changes to AD and GPOs, Quest InTrust Plug-in for Active Directory provides protection against changes to the most critical AD objects, such as organizational units (OUs) being accidentally deleted and GPO settings being modified. Quest InTrust Plug-in for Active Directory can immediately notify you of unwanted changes, take automatic action against undesired changes, and even prevent changes to the most vulnerable objects from occurring.

Key Benefits

• Audit Detailed Active Directory Changes—InTrust for Active Directory provides comprehensive, detailed, real-time auditing of all changes to AD and GPOs, including changes to AD configuration, mailbox security and GPO settings.
• Protect Active Directory Objects—In addition to tracking all changes to AD and GPOs, InTrust for Active Directory provides protection against changes to the most critical AD objects, such as OUs being accidentally deleted and GPO settings being modified.
• Audit Unusual User Activity—InTrust Plug-in for Active Directory collects and correlates all unusual user and suspicious administrator activity.
• Audit Active Directory Security Changes—InTrust Plug-in for Active Directory audits when users and administrators are granted additional permissions in AD, either through addition to security groups, assignment of user rights or delegated rights to AD.
• Audit Adherence to Security Best Practices—InTrust Plug-in for Active Directory ensures that established security best practices and internal policies are maintained by notifying when these practices are violated.
• Real-Time Response—InTrust Plug-in for Active Directory provides real-time response to the most critical events and changes to AD. Administrators can be notified immediately by e-mail when possible violations and changes to critical objects occur along with automatic actions in response to certain events.