ManageEngine ADAudit Plus Reviews

The main use case for ManageEngine ADAudit Plus is primarily focused on auditing, so any changes related to Active Directory or Azure Intra ID or even file servers, such as file monitoring, are immediately recorded by ADAudit and alert the administrators of any critical changes to the platform in their ecosystem, immediately alerting them to the administrator. It focuses on the auditing side of it.

The key functionalities of ManageEngine ADAudit Plus are primarily Active Directory reporting, where we create the whole user life cycle management, such as when users are created, who created them, when users are deleted, what group memberships changed, and not just for users, but for all Active Directory objects, users, computers, groups, and group policies. All changes are recorded immediately in real-time and reported for forensic analysis of incidents including who created them, what exactly changed, and what were the old and new values for the attributes.

In case of a ransomware attack on a particular server, we can check what process created the files and what files have changed, even with features such as attack surface analyzer that help administrators see what's happening in their local Active Directory regarding password attacks.

ManageEngine ADAudit Plus provides real-time tracking capabilities through agent installation, which works in real-time to collect information and immediately alerts if anything matches the defined conditions in the application.

An area of improvement for ManageEngine ADAudit Plus could be in graphical reporting, as currently, it's limited with old school bar charts, and having more interactive reports with a better graphical user interface would be beneficial.

I have been working with ManageEngine ADAudit Plus for the past eight years.

I am totally satisfied with the functionality of ManageEngine ADAudit Plus, and my clients are totally satisfied as well. I would rate the stability of ManageEngine ADAudit Plus as nine out of ten.

I would rate the scalability of ManageEngine ADAudit Plus as eight out of ten.

The setup process for ManageEngine ADAudit Plus is very straightforward, as it is a simple installation procedure.

The main competitor in the market for ManageEngine ADAudit Plus is Netwrix. When comparing ManageEngine ADAudit Plus with Netwrix, ManageEngine ADAudit Plus is better primarily due to its pricing model.

I am the distributor for ManageEngine in Australia and New Zealand, working closely with ManageEngine products across their entire portfolio, including IAM, PAM360, Endpoint Central, and almost all other ManageEngine products.

The alert system in ManageEngine ADAudit Plus is based on conditions where you can create or define your own alert profile. For example, if someone becomes a member of domain admin, which is the highest privilege in the organization, you can set immediate alerts to administrators. The alert profile is completely customizable and comes with more than 100 predefined alerts, and customers can configure specific conditional alerts with a custom profile.

Granular auditing provides immediate visibility to check the settings of the exact attribute, the old value of that particular attribute and the new value at the moment, along with the details about who changed it and at what time. These vital attributes are essential for any forensic analysis or root cause analysis.

I rate ManageEngine ADAudit Plus a 9 out of 10.

This is a use case for users encountering failures in logging on and attempts to embed names. The focus is on common scenarios where some devices and an engineer log in. When they reset the password, their existing safety password may remain stored in the device's credential manager. Then users might end up auto-logging. Diagnosis support or root cause analysis can help system engineers identify which devices had failed login attempts and which usernames tried to embed passwords. This allows them to easily resolve the issue.

I have been involved with this product for the last three years, participating in service and support within our company. 

We are currently supporting over 30 companies. This month, we deployed the solution for three companies, including two RMGs and one private bank in Bangladesh. The popularity of this product is due to its active directory monitoring abilities. 

Engineers can receive reports and log details within one to five seconds, which is essential for monitoring user activity swiftly and effectively.

This product is very well-liked in Bangladesh due to user tracking, failed logins, and Jar reports for any Barna activity or execution. This solution's popularity extends through comprehensive auditing capabilities.

There is room for improvement, especially in the standard professional edition. Some features require more external integration. Enhancements in combo settings and basic services are needed. 

While activity monitoring is cost-effective, workstation monitoring can be challenging without additional training. Clients have shared concerns about device disassociation in AD, highlighting the need for improvement on this front. ManageEngine could develop more orchestration solutions. 

Decreasing workstation requirements could broaden the product's appeal in Bangladesh, especially as financial institutions have thousands of users and this can be cost-prohibitive.

I have used the solution for the last three years.

This is a very stable product. Our clients rate their satisfaction as nine to ten out of ten. We conduct surveys to ask if they have any queries or feel differently. Clients are very pleased and offer positive feedback. 

When compared to similar products like Accenture Plus or Reminder Plus, this solution excels in identity access management. ManageEngine tools are appreciated, and our clients in Bangladesh are particularly satisfied.

This product is highly scalable and supports easy migration. The process involves transferring the installation folder, including all dependencies, to the same IP and orchestration or serverless environment on a different device. 

Migration can be achieved within one to two hours, requiring minimal downtime. We have migrated four to five client environments in the past year without issues.

Their support is very efficient. 

We have deployed between thirty and forty products, particularly for enterprise organizations, and have considerable experience with this. While we don't usually require end support, when advanced queries arise, we contact ManageEngine. They promptly respond and guide us through solutions. 

Customer service is effective, even for new users who need guidance on complex issues, often providing resolutions within a minute.

Neutral

The initial setup is intuitive and adaptable, much like the deployment process. It allows remote clients from countries such as Singapore, Indonesia, and the USA to integrate with ease. We provide them with an installation guideline, and they manage the setup with little difficulty. For advanced configuration, remote connections are established to finalize the setup. It's a flexible solution that clients easily adjust to.

For clients such as banks or healthcare organizations, we handle deployment and configuration in one to two hours. Once configured, clients can operate the system for six months to a year without additional assistance. Necessary reports are generated automatically. ManageEngine tools like ADManager Plus and ADAudit Plus offer intelligent monitoring that surpasses other substitutes.

Feedback from clients indicates their keen interest in the product, as it allows for easy budget approval without needing an advisory board meeting. Clients appreciate its cost-efficiency and express investment interest.

It is a leading solution among Bangladeshi companies. It is cost-effective.

I rate this ten out of ten. This is the best solution in my opinion, particularly for banking or healthcare organizations. It stands out in providing effective solutions. 

I have worked with most of the ManageEngine product suite, including OpManager and Endpoint Central. I have worked with the AD360 suite. I have worked with ADManager and AD Audit. I have worked with the AD help desk service. I have worked with ManageEngine ADAudit Plus.

What is excellent about this product, specifically in ManageEngine ADAudit Plus, is that it has many default reports. We don't need any custom reports to be generated because there are so many in-built reports. A customer can get any detailed information from the in-built reports, and they don't need to create any other custom reports. Most of the reports are available.

The detailed insights into logon activities and file access changes provided by the product are beneficial, as the default reports include all the relevant details. Most of the customers don't purchase the file auditing part; they mainly audit user logon and workstation activity.

The customers that I have implemented for, such as a leading bank in Sri Lanka, don't have integrations with native audit policies or object path permissions. They haven't done any integration.

From the complexity part, I have some challenges with editing the Group Policy. When configuring the GPO, group policy audit, I have faced some challenges.

The problem in GP editing means that in ManageEngine ADAudit Plus, it can audit group policy, and there is a configuration to be done on the controller side.

In Sri Lanka, for ManageEngine ADAudit Plus, most of the clients are implementing on-premises solutions. They don't opt for cloud deployment.

I find the solution stable at the moment.

I have not faced any scalability issues at the moment.

The technical support from ManageEngine is good. I would rate it as better. I would give their support a nine out of ten, where one is bad and ten is very good.

Positive

We don't have competitive products here in Sri Lanka, so at the moment there are no challenges or disadvantages.

Most of the time, the installation is easy to implement.

We are partners and system integrators. Regarding ManageEngine ADAudit Plus, we have done the implementations as partners.

The solution definitely provides time savings.

The price is normal for this type of solution.

I am not familiar with Clarity CA from Broadcom.

I am currently using these products. I can provide feedback about what I think of any of the products.

Regarding alerting, most of the customers have not created any alerts.

Sometimes when the audit retention period is maximized, the server storage consumption will be higher. This depends on the customer side and their server resources rather than the product side.

I rate ManageEngine ADAudit Plus nine out of ten.

I use ADAudit Plus primarily for fetching reports. It is highly integrated with my Active Directory infrastructure, and I use it mainly for audit purposes. The user-based reports are shared with my auditors and senior management.

Some of the most valuable features of ADAudit Plus are the granular parts of the reports fetched from Active Directory. These reports are based on events and the analysis part, which is clear for everyone. This makes me happy. The audit functionality and the ability to share user-based reports with management are significant advantages.

The interface could be improved, and the log collecting feature should have additional functionalities. For example, I would like to generate reports on users who have not logged into the Active Directory for a specific period, but this feature is not available.

I have been working with ADAudit Plus for more than two years.

The stability has been good for me, and I have not faced any kind of downtimes or issues.

I rate the scalability as eight out of ten. It is sufficient for my needs.

The technical support is easy for me as I have a support architecture in place. It has been good for the software.

Neutral

The initial setup for ADAudit Plus is simple.

I consider the pricing for ADAudit Plus a bit high compared to other software solutions, so I would rate it around two or three on the pricing scale.

Some competing products evaluated are from Sophos and Microsoft.

I recommend ADAudit Plus for mid-sized companies. Since everything is moving to the cloud, ManageEngine ADAudit Plus should also be cloud-based instead of on-premises. 

I rate the overall product an eight out of ten. I recommend this solution to others as well. Every ManageEngine product is a good solution.

I use the solution in my company to monitor our security groups, admin groups, and new account creations. In our company, we use the tool for several things that keep us on top of what is happening in our Active Directory.

The solution's most valuable feature is the network security offered by the tool. One of the features we use in the tool tells our company if a user has been added to a group, especially a privileged group like domain admins, administrators, enterprise admins, and schema admins. In my organization, we get an email immediately if a user gets added to one of those groups.

The solution does not require improvements to meet our company's needs. In our company, we have figured out everything we need with the tool, and my company's support team has played a valuable role in helping us do so.

There is nothing I can see that needs improvement in the tool. It is nice to know that ManageEngine looks at various areas in the product so that it doesn't become a security liability. Our company tracks all the NIST lists for common vulnerabilities, and I have never seen ManageEngine ADAudit Plus show up in any of them. I think it is a pretty secure product.

Measuring the return on investment for a business that uses ManageEngine ADAudit Plus should be a process that must be made easier.

I have been using ManageEngine ADAudit Plus for a year.

The product has never crashed. The tool has always been up and running. We have never had any error messages. It just does what it does.

I work in a small shop, so I can't speak about the tool's scalability. You need to talk to someone that has thousands of users and multiple domains.

My company has more than 100 users, but we are a small to medium business, as far as any company we deal with would consider us from an IT perspective.

When we had to reach out to the solution's technical support, they were happy to work with us, and you can have a shared session if you need to. The tool's support team can remotely access your box if you allow them and walk you through things. I rate the technical support a ten out of ten.

Positive

The product's initial setup phase is very easy.

The product's deployment phase can be managed by one person who is a system admin.

The return on investment for ManageEngine ADAudit Plus is very hard to measure. We have not had a security incident in over five years, and adding this to our security stack has given us greater visibility into what is going on with our Active Directory. In my opinion, the return on investment is definitely good. Somebody could go in and change, take over an account, or make it a domain admin, but we wouldn't even know. We would just be in the dark, after which the next thing we would know is that a hacker has encrypted our systems.

The tool is affordable, and our company is very happy with it. If ten is the most expensive and one is the least expensive, I rate the tool a three or four.

Our company had been looking for a product like ManageEngine ADAudit Plus for some time, but we had affordability issues. Then, ManageEngine ran some sort of special offer, and we bought a perpetual license where all we have to do is renew the support every year. The tool became affordable, and we grabbed it.

I can't really speak about the differences between ManageEngine ADAudit Plus and other tools. I have tried a few different things, and they are all similar. The bottom line for our company is it does what we want it to do.

The real-time alerting system's benefit to IT security management is excellent. Our company has tested it quite a few times in different environments and strategies, and you just cannot fool it into not triggering an alert. One of the things hackers do when they get into an environment is go for probably a low-level account. If a hacker gets into an environment as user X and if it is just a domain user and that is the only group such a user belongs to, then the next thing they want to do is to increase or elevate that account to an administrative level. Hackers would try to add the domain admin, the local admin, or maybe another higher-end admin like schema admin or enterprise admin to that account of user X. If the hacker is successful in following the process as mentioned earlier, our company will get an alert within ten seconds saying that something has happened, allowing us to disable such an account.

In our company, we don't consider this product an AI product, and we are kind of keeping our toes out of the water of AI, except for with our email filtering, where we are using a product called IRONSCALES, which has its own AI engine for detecting spams and phishing activity.

I recommend the tool to the right-sized company, where it can be an excellent fit. The tool definitely increases visibility in the Active Directory and alerts you if something unusual occurs.

I rate the tool a ten out of ten.

We use ADAudit Plus to track all the login events for each user, including all the domain accounts for every employee. If there are multiple machines and users attempting to log in, and there are login failures on one of them, it can be challenging to identify the specific machine causing the issue. 

For example, if a user has left their phone at home, which is configured with their email password, and the password has expired, it may result in repeated failed login attempts due to the auto-login feature in Exchange. This can lead to the user's account being locked out. 

ADAudit Plus provides excellent analysis to pinpoint the exact problem and understand why the user is experiencing difficulties. These insights are unique to this tool and greatly assist us in managing such frequently occurring issues. As a result, it helps reduce IT operational incidents related to user account login issues.

The Account Lockout Analyzer and the Inactive Users reports are particularly valuable. The Account Lockout Analyzer helps us identify and resolve account lockout issues, while the Inactive Users report provides details on users who haven't logged in for a specific duration.

If ADAudit Plus could include reporting of non-Microsoft products; it would be a great enhancement. 

Otherwise, we only have a Microsoft-based environment. So, for us, it is up to the mark. But I don't see it fitting in very well with companies that have a hybrid environment.

In future releases, I would appreciate better integration with Log360. There are a few things that ADAudit Plus can do, but LogRhythm cannot. So, I want them to have a common language or platform to display all these details on one page.

Having a unified ecosystem rather than having to log in to multiple tools would be beneficial. It can be a single dashboard with all these details.

I have been using ManageEngine ADAudit Plus for three years. We use the latest version.

I would rate the stability an eight out of ten. 

I rate the scalability a seven out of ten. There are no issues. However, it only supports Microsoft environments, so it may not be able to manage scenarios involving other operating systems like macOS.

We have over 500 endpoints. We use it 24/7 and to its maximum potential.

The initial setup was difficult. I would rate my experience with the initial setup a three out of ten, where one being difficult and ten being very easy to set up. 

During the deployment, one challenge was mapping the systems. We needed to integrate each machine individually, and the solution doesn't provide an option for that. Instead, it relies on its own mechanism through DNS, which is not always reliable for taking inventory or scanning devices. They should offer a way for us to manually upload the devices instead of relying solely on their method.

DNS doesn't always maintain live records, so the solution keeps populating itself with old and unused items. We have to do a lot of cleanup, and it consumes licenses for these unused items as well.

Two people were required for the deployment. They were system administrators. Everything went according to plan. It took us one week to deploy ADAudit Plus.

Moreover, the solution requires maintenance, which is covered under the same EMC (Enterprise Maintenance Contract). Plus, one person from the support side.

We have close to 80% return on investment.

I would rate the pricing around five out of ten. It's a medium-priced solution.

There are additional costs. We need to add licenses based on the number of endpoints. So, we have to keep track of the capacity and add licenses as needed.

We went straight for this product without considering other options.  ADAudit Plus is the first product in this category for us.

I would recommend it for Microsoft-based active directory environments. It is specifically designed for Microsoft active directory.

Overall, I would rate the solution eight out of ten. It meets our requirements and performs well in our environment.

We are using it for compliance and security. We have its latest version. We are all up to date with whatever we're doing. 

We have a quicker response time to threats.

Real-time monitoring of AD changes and logons is valuable.

Its configuration can be better. There were 44 pages of documented notes of what I had to do to get the product to work during the installation process.

I have been using this solution for a year or so.

It is stable.

It seems to be scalable. We have three users who are using it. We don't have plans to increase its usage. It was sized right out of the gate, and at this point in the game, it is not growing. It is also not decreasing. It covers the whole enterprise.

I haven't had as much need for support on this product. I have had better success with technical support on this product than on other products. ManageEngine Desktop Central is supported by a different team, and getting support on that was hard, but with this product, I have had better success with support.

I didn't use any other solution previously.

It was complex. All of it has to do with setting permissions so that it can do the audits, policies, and things like that. So, it is very complicated.

We implemented it in-house. It requires very little maintenance.

It is not saving me money, but it is making me compliant. From a return on investment perspective, it is not generating significant revenue. So, the ROI is low, but the business value is high.

If you're calculating savings, then the savings are none. It is an expense, but if you're calculating value, then the return on investment is big. It is not in terms of dollars; it is in terms of compliance and risk management.

My guess is that it was around $4,000 or $5,000 a year, and we bought a license, and then we have maintenance fees. I'm not 100% sure how that worked out.

I looked at a couple, but I don't remember them. It was a while back.

I'd probably consider looking at the cloud offering if they have one.

I would rate it a seven out of ten.

I used ManageEngine ADAudit Plus to provide metrics on Active Directory account modification, server metrics, etc.

ManageEngine ADAudit Plus helped our organization with internal audits and compliance reporting.

The most valuable feature of ManageEngine ADAudit Plus is its reports.

The solution's managing file server activity could be improved.

I have been using ManageEngine ADAudit Plus for eight years.

I rate ManageEngine ADAudit Plus ten out of ten for stability.

I rate ManageEngine ADAudit Plus ten out of ten for scalability.

The solution’s initial setup is very easy.

We have seen a return on investment with ManageEngine ADAudit Plus because it saved us time and money.

The solution's pricing is acceptable.

Overall, I rate ManageEngine ADAudit Plus ten out of ten.

We use the product to track events and monitor logs of servers and workstations. 

I am impressed with the tool's tracking ability. It is intuitive and easy to use. 

The solution should include more details on file creation and modification. It also needs to have a quick message for troubleshooting problems which needs to be detailed and generic. 

I have been using the solution for three years. 

The product is stable. 

My company has 100 users for the solution. 

The tool's setup is easy. The solution's deployment gets completed in three hours. It can be completed in five minutes if everything is up and running. 

I would rate the product a seven out of ten. 

We primarily use this solution for auditing and monitoring and we deploy it on-premises.

The solution has helped us manage all our print servers on a duplex or a single page. It also helps us monitor the printers, the heavy loaded work and the no load.

It assists in managing the active directory and modifying the reintegrated GPOs. It has helped a lot with the documentation, as we have an IO document related to each part of the group policies, and it must be a basis. This solution has made our job a lot easier.

The active directory is valuable.

The solution can be improved by including more templates and reports, especially for the locked and locked-out passwords and for locked-out users. It needs special attention to identify why specific users have been locked out.

We have been using the solution for approximately three years and are currently using one of the latest versions.

The solution is stable.

The solution is scalable and six members of our organization are currently utilizing the solution.

I rate customer service and support a six out of ten. 

Neutral

The initial setup was straightforward.

We deployed it in-house.

We have seen a return on investment and are able to track or monitor any changes going through the active directory, as well as everything related to the group policies, print servers or the file service and the permissions.

We did not evaluate other options.

I rate the solution an eight out of ten. The solution is good but can be improved by including more templates and reports. I strongly advise new users to this solution to make sure all database for the ManageEngine is put on to ensure that the database is up 24/7 and there is no way you could lose any connection with the database.