Change Auditor for Active Directory Reviews

My main use case for Change Auditor for Active Directory is auditing changes, finding changes to undo, and break-fix solving issues.

For example, I could give you a quick specific example of how I've used it to solve an issue: somebody made a change to a person's attribute that caused an application issue, and we found that it was changed on thousands of accounts. We identified the source; it was a script, and we discovered who ran it and from what machine.

In addition to that, I have also used Change Auditor for Active Directory to find out who's making inefficient LDAP calls to domain controllers.

The best features Change Auditor for Active Directory offers are that it's lightweight and easy to understand. You don't have to memorize event IDs since it's in English.

What makes Change Auditor for Active Directory lightweight and easy to understand in my experience is that it doesn't require the events to record to the domain controllers. Therefore, I can focus just on the event types without having to turn up detailed logging on my DCs.

Change Auditor for Active Directory has positively impacted my organization by helping us respond to audits very quickly to show that we had evidence of who was making the changes and match them up to the ticket request and who approved it.

After implementing Change Auditor for Active Directory, it has allowed us to answer questions literally in minutes, whereas it would have taken us half a day to a day before.

Change Auditor for Active Directory could be improved if the client were more flexible when installed, so if I upgrade the server, I wouldn't have to replace the clients at the same time.

I think giving it a nine has to do more so with cost and the amount of SQL maintenance that has to be done.

I have been using Change Auditor for Active Directory since 2007, so that would be 18 years.

Change Auditor for Active Directory is stable.

Change Auditor for Active Directory is scalable because I can deploy multiple repository servers to do the collections from many different domains and domain controllers across the globe.

The customer support for Change Auditor for Active Directory, the few times I've had to use it, has been very good.

Negative

I previously used a different solution, which was Splunk, but the reason for the switch is that Splunk relies on the events logging to forward through the Splunk forwarders, while Change Auditor for Active Directory does not.

I have seen a return on investment since I think it's been time saved to free up staff to focus on other things without having to dig through event logs or Splunk to find the changes.

My experience with pricing, setup cost, and licensing was pretty straightforward. Actually, we bundled it with some other services offered from Quest to get a volume discount.

Before choosing Change Auditor for Active Directory, I did not evaluate other options.

My advice to others looking into using Change Auditor for Active Directory is to request eval keys for as many different suite components as you need. Don't overlook the log on events and LDAP events besides the AD events. Consider getting Change Auditor for Active Directory module for Azure as well. I would rate this product a nine.

The primary use case is to manage human errors, like protecting identities from being modified by the software, and to audit security. This includes monitoring high-privilege accounts and having the ability to back up previous values if unauthorized modifications occur in the Active Directory.

This solution helps manage human errors by protecting identities and allows auditing of high-privilege accounts. It also provides the capability to backup previous values when unauthorized changes occur.

The most valuable features are the ability to protect Active Directory accounts and groups, and the real-time notifications that help manage Active Directory more effectively.

Areas that could be improved include having more management capabilities with command-line scripts and more flexibility in general. Often this type of tool could benefit from better scripting capabilities.

I have been using this solution for about two years.

I have never experienced any outage or latency with this solution. It is highly stable.

The product is very scalable; we handle a large number of accounts without performance issues.

I have only used the documentation on the website, which has been technically sufficient to answer my questions. I haven't had to call support.

The price can vary based on the components purchased and the needs and budget of the organization. It is considered a bit pricey, especially for smaller companies.

To configure the solution effectively, protect groups as well as high-privilege accounts to prevent privilege escalation. Focus on a detailed and well-thought-out configuration, not just the default settings.

I'd rate the solution nine out of ten.