I use Change Auditor for Windows File Servers to log history. It's helpful when we have critical changes in Active Directory, like adding or removing items. I use it extensively for monitoring.
Provides granular queries of security logs and real-time alerting helps me mitigate risks
What is our primary use case?
How has it helped my organization?
The real-time alerting helps me mitigate risks. For example, someone adds a member to the domain admin group. We have an alert set up, so if someone does this unexpectedly, we get notified. Then, we can check and verify if the action is legitimate or a potential threat to the environment.
What is most valuable?
In terms of features, the querying is great. It provides granular queries of security logs, which is helpful when looking for the history of changes made within Active Directory.
What needs improvement?
They've already made improvements! They have a tool called IT Security Search, which lets you perform queries outside of Change Auditor. It's much faster. This is a really good addition and helps us avoid directly logging into the server to open the console.
For how long have I used the solution?
I have been using it since 2018.
What do I think about the stability of the solution?
I don't remember any stability issues with it. I would rate the stability an eight out of ten, there is always room for improvement.
What do I think about the scalability of the solution?
I would rate the scalability an eight out of ten.
How are customer service and support?
The customer service and support could improve their approach to questioning issues. They tend to ask questions one at a time, which creates a lot of back-and-forth communication.
It would be helpful if they had checklists for common issues customers encounter, as it could speed up the resolution process. Asking questions back and forth via email isn't always the most efficient way to resolve issues quickly.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is very easy.
What other advice do I have?
Overall, I would rate the solution a nine out of ten. My advice is that it's a good tool, and others should consider it.
Which deployment model are you using for this solution?
On-premises
