[ActiveDir]Active Directory and Group Policy changes monitoring tool

Hi! Is there any tools to monitor changes in AD and GPO? I mean that it is necessery to log all chenges (and usernames who makes that changes) to some database and have an ability to make reports by users, by objects and so on…

RE: [ActiveDir] LastLogon timestamp

' This code prints the last logon timestamp for a user. ' -- SCRIPT CONFIGURATION -- strUserDN = "" ' e.g. cn=rallen,ou=Sales,dc=rallencorp,dc=com ' -- END CONFIGURATION - set objUser = GetObject("LDAP://" & strUserDN) set objLogon = objUser.Get("lastLogonTimestamp") intLogon

[ActiveDir]Group Policy Administrative Templates

Hi!   Are there any tools that can assist me to create .ADM (Group Policy Administrative Templates) files? If anybody knows, please send me a link.   Regards.