How to view changes done in Active Direcotry?

While working with Active Directory (2000/03), we will be making lot of changes according to the security requirements. Now how to view the last one month changes done in the active directory?How to view changes done in Active Direcotry?
There is not really a good answer to this question. However, ..



Depending on what type of changes that you be making and how they are stored, but it is possible to export objects from AD: http://msdn2.microsoft.com/en-us/library



There are commercial products that do AD auditing:

http://www.bi101.com/products/solutions/

http://www.quest.com/intrust-for-active-



Make sure you have a daily backup of the system state from all of your domain controllers so you could restore to a non production environment.