We are evaluating this project for an improved change management drive at the agency where I work. In my scenario, I have 4 identical windows 2008 R2 enterprise servers, hardware, build, spec = exactly the same. They have all been imaged with the same core image. Lets say server A has had 400 changes, server B - 200 changes, Server C - 100 changes, and Server D has not been changed. Is there a way to (1) compare the most-changed server to the zero-change server within Netwrix Auditor; and (2) is there a way to compare or show the differences between these 4 servers?
Would appreciate any guidance or pointers.