The tool that made our IT life easier and made our environment more secure
November 01, 2022
The tool that made our IT life easier and made our environment more secure
Score 10 out of 10
Vetted Review
Verified User
Overall Satisfaction with ManageEngine ADAudit Plus
We are managing a large group of users and groups in multiple domains with our dedicated IT support group that consists of 5 domain admins and 35 power users. We also have a user provisioning application in-place that controls user creation and group addition/removal.
The enduser lead can manage groups for their employees using the provisioning application, all changes are audited in this application. For all the other changes that are made outside the tool we use AD Audit logging, but that is hard to manage because securitylogs ar fastly overwritten (even with high capacity log settings) and most of the time it is hard to find the specific changes you need.
Since we use ADAuditplus all these problems are gone and besides that we saw that ADauditplus had more capabilities that helped us to prefend looking in audit logs, because we now have the ability to set alerts for specific changes that we did not want to happen. For example the "password never expires" option, we dont want that to be set for any user. In ADAuditPlus I created a rule that send me and IT management an email that shows us who and when that specific change was made. We are very happy with ADauditplus, it helps us to maintain the high level security in our environment.
The enduser lead can manage groups for their employees using the provisioning application, all changes are audited in this application. For all the other changes that are made outside the tool we use AD Audit logging, but that is hard to manage because securitylogs ar fastly overwritten (even with high capacity log settings) and most of the time it is hard to find the specific changes you need.
Since we use ADAuditplus all these problems are gone and besides that we saw that ADauditplus had more capabilities that helped us to prefend looking in audit logs, because we now have the ability to set alerts for specific changes that we did not want to happen. For example the "password never expires" option, we dont want that to be set for any user. In ADAuditPlus I created a rule that send me and IT management an email that shows us who and when that specific change was made. We are very happy with ADauditplus, it helps us to maintain the high level security in our environment.
- ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
- You can build your own reports based on almost every logic you can think of
- You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
- First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
- I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.
- The archive function can use some more work. When I search for data and the data is found in the archive I can push a button to retrieve it, but there is no notification when the data is fully loaded again.
- Searching for specific data in reports it could be helpful to have a drop list of common failures when using the advanced filter option.
- Besides the default alerts dashboard it would be nice to create your own alerts dashboards. That way I could give other people there own alerts dashboard with the alerts that are helpfull for them only.
- No more ghost accounts and password never expires in our AD, the security level is therefore much higher then it was before. And we need less manhour to maintain that.
- Before ADAuditplus we had several hundred accounts with password never expires and at least 15 changes on that item every week. Since we have ADaudtiplus we have no accounts with password never expires and we only see modifications on that item sometimes when a new IT employee starts within our group. IT crew learns fast what to do and especially what NOT to do in our environment to keep things secure.
- Before ADAuditPlus I wrote PowerShell scripts to create reports for management, since ADAuditplus the reports are build automatically every month and send to management.
The visibility of changes made in AD are very helpfull. We had an admin that made a change in a GPO that causes some strange behaviour in our environment. Normally that would take days to find, especially because the admin was a few days out of office and couldnt tell us the change he made. But after looking into our alerts we found very fast the specific change that was made to a GPO that pointed us in the right direction to solve the problem within 30 minutes.
Giving a better view of how the IT crew is working with security sensitive settings in general on all objects in AD. It also gives a good view of the logon behaviour in general.
For this feature to work well we would need licenses for all or workstations, we dont have that in place yet.
I answered this question allready partial in detail in previous answers.
We dont have the licenses for all servers, therefor I can't answer this question based on servers.
We dont have the licenses for all servers, therefor I can't answer this question based on servers.
N/A
Do you think ManageEngine ADAudit Plus delivers good value for the price?
Yes
Are you happy with ManageEngine ADAudit Plus's feature set?
Yes
Did ManageEngine ADAudit Plus live up to sales and marketing promises?
Yes
Did implementation of ManageEngine ADAudit Plus go as expected?
Yes
Would you buy ManageEngine ADAudit Plus again?
Yes