Vote for DirectoryLockdown
DirectoryLockdown helps protect the directory from "rogue administrators" who assume the rights of highly trusted enterprise administrators in an attempt to subvert the system. Count on DirectoryLockdown to: Reduce the security risks associated with domain administrators acting maliciously. Reduce the security risks associated with domain administrators operating at remote or regional locations. Alert administrators to the possible corruption of Configuration and Schema information so that the corruption can be stopped in its tracks and more.
Key Features: Monitors objects in the Configuration and Schema NCs on DCs 24x7; Detects unauthorized changes to Configuration and Schema NCs on DCs; Alerts network management when a modification to the Configuration or Schema NC occurs on a DC; Prevents the replication to and from the comprised DC by quarantining it; Monitors domain controllers and sends alerts when they are unexpectedly taken offline; Offers flexible response options: (1) Complete response and (2) Alert-Only response; Includes a recovery utility to quickly restore a downed DC; Integrates with MOM (Management Pack) and HP OpenView Operations for Windows (Smartlink)