ManageEngine ADAudit Plus

Score9.3 out of 10

119 Reviews and Ratings

What is ManageEngine ADAudit Plus?

ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.

Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.
Achieve hybrid AD monitoring with a single, correlated view of all the activities happening across both on-premises AD and Azure AD.
Monitor every user's logon and logoff activity, including every successful and failed login attempt across network workstations.
Audit Windows file servers, failover clusters, NetApp, and EMC storage to document changes to files and folders.
Monitor system configurations, program files, and folder changes to ensure file integrity.
Track changes across Windows servers, printers, and USB devices with a summary of events.
Leverage advanced statistical analysis and machine learning techniques to detect anomalous behaviour and defend against cyber attacks.

Categories & Use Cases

Media

1 / 5

Software and hardware inventory
Management of the physical and software from acquisition through disposal.
Category average: 6.8
Multiple Server Monitoring
Server Monitoring is a process to monitor server's system resources like CPU Usage, Memory Consumption, I/O etc.
Category average: 8.4
Multi-device monitoring
Network device monitoring in real time for any devices on your network
Category average: 8.2

Antivirus and malware management
Detection of security risks like malware and viruses
Category average: 5.4
Data backup and recovery
Backup and recovery of lost data
Category average: 6.2
Network device monitoring
Monitor the real-time performance and health of devices on your network
Category average: 5.5

Eric Willinsky

Systems Engineer in Information Technology at Idaho Housing and Finance (201-500 employees employees)

Use Cases and Deployment Scope

We use AD Audit to manage all avenues of Active Directory. Monitoring of AD user's creation, change and deletes Monitoring of Admin accounts Monitoring of specific confidential file changes Monitoring of thresholds of changed files Monitoring of who deleted, changed, or moved files These are the basic functions we use, but there are many more that are in use.

Pros

File change auditing.
Reports on anomalies that happen with users or files.
Printer usage results.
User lockout auditing.

Cons

Better detailed logging for AD Account Bad Passwords.

Return on Investment

It gives me peace of mind knowing that auditing is in place and ready to be reported at any time.

Alternatives Considered

Nessus, ManageEngine Endpoint Central and ManageEngine Exchange Reporter Plus

Other Software Used

ManageEngine Endpoint Central, Remote Desktop Manager, PRTG Network Monitor

Verified User

Administrator in Information Technology (201-500 employees employees)

Use Cases and Deployment Scope

We use AdAudit to centrally repository all Active Directory user and system events. And do monthly, quarterly, and yearly reporting on user interactions, permission changes, account creations, and deletions. And for helping find where people get locked out. Great tool for AD reporting all around! You can create reports in various file formats; pdf, csv, xls, etc for the necessary consumption needs.

Pros

AD reporting.
Live user account event research and review.
network drive access permission changes.

Cons

some of the reports have bugs and have been long-standing issues not resolved for years.
web portal has not really changed in look & feel in years.
not always the easiest to customize reports.

Return on Investment

We added quarterly AD user reporting to our financial auditing process easily.
We added monthly user account membership reviewing.
Added the ability to troubleshoot user lockout ad hoc to IT controls.

Alternatives Considered

Quest Change Auditor

Other Software Used

ManageEngine ADManager Plus, PRTG Network Monitor, VMware vSphere

Usability

Jeferson Alencar Olsen

IT Coordinator in Information Technology at Adami SA (1001-5000 employees employees)

Use Cases and Deployment Scope

We use ManageEngine ADAudit Plus as a security layer for AD activity audits, automatic detection of anomalous behavior, and also as a research tool to find users vs. computers.

Pros

Identify unusual logins to AD, such as after hours, for example.
Detailed audit of user changes in AD, like account change auditing, group policy changes auditing
Custom Reports and Alerts

Cons

No changes required.
No changes required.
No changes required.

Return on Investment

Reduction of Security Risks
Time Savings in Compliance
Increased IT Team Productivity
Prevention of Data Loss and Fines

Ken Lubar

CTO in Information Technology at EMI Strategic Marketing (51-200 employees employees)

Use Cases and Deployment Scope

We use ManageEngine as an SIEM system for reporting on AD and other events. Various of our customers require SIEM systems and ManageEngine met the needs. It's pretty lightweight. We have about 50 workstations and 2 active AD controllers. Not a lot of usage against the ManageEngine but it mostly does the job. See later in the review for the good, bad, and ugly.

Pros

Data capture against a wide variety of sources (logs, events, windows, Linux systems)
Ability to find specific events in the logs
Basically unlimited history
Useful dashboard (although not really once you dig into it)

Cons

It's based on Java engine that is slow -- reports are often difficult to build (we are going to upgrade the machine it's running on to see if this is the issue)
Keeping this software up to date is a pain; there should be a better "update" function
The naming and navigation are terrible -- it's never clear which feature you're looking for and where it's hidden in the menus
Adding machines is not as easy as it should be; occasionally there are IP conflicts that are nearly impossible to resolve

Return on Investment

Gets the job done and meets SIEM checklist
Occasionally has help assign responsibility for "mistakes"
Provides some peace of mind for reporting

Alternatives Considered

Splunk Log Observer

Jim Brown

Director of Corporate Technology in Information Technology at Spectrum Technologies (51-200 employees employees)

Use Cases and Deployment Scope

We monitor access to domain controllers and especially sensitive files on our file server. It has helped to identify when if anyone accessed or attempted to access sensitive files. It has also helped in monitoring password and username failures. We have several daily reports we use for these.

Pros

bad password/username monitoring
file access monitoring
logon activity monitoring

Cons

a security hardening section like other ManageEngine products
make the user interface more similar between other ManageEngine products
a little more detail in reports

Return on Investment

it has saved hours of researching and logging in and checking servers individually, that alone has paid for investment

Other Software Used

ManageEngine ADSelfService Plus, ManageEngine M365 Manager Plus, ManageEngine ADManager Plus

Varonis Data Security Platform

Netwrix Auditor

SolarWinds Access Rights Manager (ARM)

Splunk User Behavior Analytics

ManageEngine ADAudit Plus

What is ManageEngine ADAudit Plus?

Categories & Use Cases

Media

Key Features

Top Performing Features

Software and hardware inventory

Multiple Server Monitoring

Multi-device monitoring

Areas for Improvement

Antivirus and malware management

Data backup and recovery

Network device monitoring

Reviews

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Other Software Used

Usability

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Alternatives Considered

Use Cases and Deployment Scope

Pros

Cons

Return on Investment

Other Software Used

Related Products