Active Directory Integrity Monitor
ADIM checks and sends a report for any changes to enabled status, Security Groups, and any new accounts found.
The report consists of HTML formatted tables for easier viewing of discovered changes.
Script can be scheduled to perform periodic checks for changes between your current AD environment parameters and it's parameters since the last check.