Audit Logger from Pacifictech may also be able to achieve what you are looking for, www.pacifictechsol.com/.../audit-logger

Audit logger does a lot, but I don't think it monitors user account changes.  Logins, yes, but not the changes to the account by ADMIN.  I went through this process with a big government client.  We told them to use Windows security in Sage, not Sage security, then you can control user access through active directory.

Wasn't sure, it states that AS and CS are in the list of modules they audit but don't know to what degree they do.

Users and passwords for Sage security are in ..\Site\USERS.ISM and BROWSE.ISM, not SQL tables, so AS or CS don't kick it.  Things like security group changes in CSAUTH are definitely audited.  Changes to the User profile are in the A4WUSER object, you can see it in RVSPY.  So, if Extender can hook to A4WUSER, then maybe they do have password date change timestamps.  I'm not sure.

Users and passwords for Sage security are in ..\Site\USERS.ISM and BROWSE.ISM, not SQL tables, so AS or CS don't kick it.  Things like security group changes in CSAUTH are definitely audited.  Changes to the User profile are in the A4WUSER object, you can see it in RVSPY.  So, if Extender can hook to A4WUSER, then maybe they do have password date change timestamps.  I'm not sure.

Right, of course, forgot to about that and was thinking more about security group and permissions changes.

Extender can connect to AS0003 and record all changes - there is even a KB article about it!

Good, I'm always happy to learn new things.

Cool!