CyberArk Privileged Access Management vs. ManageEngine ADManager Plus

The system is great for enterprise or larger IT departments or teams where temporary or full access may be given using privileged IDs. Requirements for needing local admin access is also eliminated which can help with specific Windows workstation related tasks. It can be very useful when working with remote teams or contractors who may need temporary access to a system when required.

Incentivized

Any environment that runs on AD needs ADManager Plus. They have already built-in 95% of the queries and reports you will need. It provides a great window into your AD environment. The interface is very intuitive and for any reports or queries that aren't already packaged the product makes them easy to build

Incentivized

• Managing local administrator accounts for Windows Servers
• Managing local root accounts for Unix Servers
• Managing service accounts for Windows Servers
• Managing IIS Application pool passwords for Windows web servers.

Incentivized

• It is very good in the bulk user creation. With this tool, we can create a number of users in just a few minutes rather than following a long old process.
• It is good for bulk user account modification. You can select a lot of users and make changes as per the requirements.
• ManageEngine ADManager Plus is helping us a lot in the report generation of user accounts, passwords, groups, and other reports that are helping us a lot.
• This tool also helps us with mailbox creation and shared mailbox creation

Incentivized

• GUI - right now everything is on one page/dashboard. Some level of folder/Safe type view would be great
• More options when storing passwords - especially for network based passwords
• Better integrations with vendors like Cisco so that admins dont need to really get the password from the vault (think Last Pass type add on)

Incentivized

• The standard version is useless for a larger company. Most have the Professional level to get the most out of the application but it is worth the cost.
• Needs better integration with Office 365 and Microsoft Teams.

Incentivized

We are very satfisfied with the software and when time permits, we hope to explore additional features we are not using. It has a lot of we ae not currently using due to staffing shortages.

Incentivized

I think CyberArk is a great product and there are many different modules to incorporate. There are many great feature sets available right out of the box and you feel safer just implementing some of the basics. The more features you implement the better the product performs. There are definitely some implementation hurdles, but typically they are too difficult to figure out.

Incentivized

The slick interface coupled with the prepackaged reports and queries, and the ability to sort and export that data makes the product great

Incentivized

Yes, it loads very quickly and moving between pages is very fast

Incentivized

I've been an engineer and architect in the Identity space for many years and CyberArk is the #1 tool I've found to help me secure accounts and credentials. I've architected CyberArk and built the implementation from the ground up twice in previous roles and found it here upon my arrival at my current job. I wouldn't want to have to live without it as it helps me sleep at night

Incentivized

Support for this software is not the greatest. If the software is not completely down, it can take up to a day to get a response back. However, once they do contact you they are friendly and helpful.

Incentivized

It is known as one of the safest products in the market. It has good support and is also available as on-premise. You can run it virtually on VMWare (and probably on other hypervisors as well). You can have a second instance on bare metal and that makes it a very safe system.

Incentivized

My company already owned ADManager when I started with them. If I remember correctly, it was chosen because it is a fairly cheap tool and because we also use Manage Engine's Service Desk Plus application. ADManager's main competitor (in my eyes) would be PowerShell, now that I have become more proficient with scripting it is rare that I use ADManager except to create users using one of the templates we created. The standardization you get with the templates is really great, it could also be done using an XML file and PowerShell, but why fix what isn't broken?

Incentivized

We are currently deploying on 1 department

Incentivized

They are able to demo the product and clearly explain use case scenario's and how to do things

Incentivized

• A positive impact is passing SOX audits when it comes to privileged account management. Making sure we are compliant with password expiration policies and complexities.

Incentivized

• The software is licensed per tech, the pricing is pretty solid.
• Helpdesk tickets feel dramatically when we started using templates to create users
• Helps to keep the network secure by knowing which old user accounts to delete

Incentivized