Looking for some input to make my life easier:

I need to run a Group Policy Audit: firstly to establish what is present and subsequently to manage the GPO's to demonstrate compliance.

I can export a report on each GPO, but that is tedious and manual, so I could make a mistake. I would prefer to run something like a powershell script or similar tool that can create an audit log and look for changes.

Alternatively, is there a reasonably cheap tool that can monitor changes in GPO's?