We are evaluating this project for an improved change management drive at the agency where I work. In my scenario, I have 4 identical windows 2008 R2 enterprise servers, hardware, build, spec = exactly the same. They have all been imaged with the same core image. Lets say server A has had 400 changes, server B - 200 changes, Server C - 100 changes, and Server D has not been changed. Is there a way to (1) compare the most-changed server to the zero-change server within Netwrix Auditor; and (2) is there a way to compare or show the differences between these 4 servers?
For question #1 this is possible in the paid version as it has overview reports which can sort changes by which server the changes were made on. For #2 this would require state-in-time reporting which is on the roadmap for the paid version. I am not sure about the freeware version at this time.