I'm looking at options for AD/GPO Auditing. Things like account creation/change/lockout. Group membership changes, logon/logoff, etc. More granular stuff like ACL changes in AD, property changes, etc would be nice, but not a top requirement.
We previously purchased AD Audit Plus Standard from ManageEngine but let our subscription lapse. The one thing that the tool lacks is real-time alerting, but the price is hard to beat. We are doing real-time alerting with PRTG right now but it's less than ideal.
Alternate options I've found thus far are from Quest and Netwrix but they look like they will be much more expensive. Is there anything else I should look at?
FYI - I have 4 DC's and around 500 user accounts, of which only 400 are for actual employees.