Finding Manual Changes to a Profile 
Use
You can confirm whether a profile file has been changed manually at operating system level by comparing the profile information in the database with the profile existing on the operating system.
Procedure
You can then display a log of any discrepancies found.