I'm looking for a program that will allow me to modify accounts in my Active Directory and also log when certain things are done to an account. Such as when an account is created/disabled have a sql database somewhere or a log of somesort or even just send an email.

Or if AD can do this I would love to know how.

Basically we are a ASP and when customers call up to have new users created/deleted people are creating them and not following the process. So in my mind that triggers something that says take it out of the peoples hands and make it automatic.

Any ideas would be great.