ManageEngine ADAudit Plus

One of the best Active Directory Auditing Tools

Komentarze: We use this product to assist internal audit team with their requirements regarding any specific user auditing.

Zalety:

Capability to audit even minute changes that have happened on domain controllers (users, computers, Groups, GPOs, PSOs, DNS Zones) and on user workstations.

Wady:

Not having the option to add in bulk workstations for auditing.

ADAuditPlus - block errors in user permissions

Komentarze: Very useful product which integrates well with our systems and allows our L1 techs to keep a handle on user login issues on a daily basis without requiring any extra permissions in AD. Reports can be emailed on a schedule which we use for auditing 3rd part access to our systems for example.

Zalety:

We have integration with various products and mainly from our helpdesk. We use this to monitor changes to user accounts - we have some restricted groups for access to some systems, so if someone copies a user and the new user should not be in one of these groups, it blocks it and alerts us. Useful for tracking locked accounts as to where/why they are being locked. We use it daily to check failed logins, for example when someone with an expired password (or leaver) has left a PC logged in generating thousands of audit failures in AD. We can then identify and resolve these easily.

Wady:

Setup for some of the above can be quite complex and we can sometimes catch ourselves out if the rules are too strict. (Manually adding someone to a group and forgetting we restricted it for example).

Could be better...

Komentarze: It was something that I inherited when I started with my current company. It's decent, but I'm probably going to move to something that's a little more robust and easier to upgrade.

Zalety:

I like the amount of data that ADAudit Plus can gather. It can pull your file server auditing, your domain controller auditing, and a whole host of other things. You can also setup alerting on specific events that makes it easy to see what's happening with your servers.

Wady:

The upgrade process is the worst thing I've ever seen in a software product. You have to put your build number into the support website, download a major upgrade, install that, and then download a service pack, and install that. It doesn't sound so bad, but the upgrade process itself is dependent on this antiquated process that uses a batch file and a Java utility. It fails more often than not and the upgrade instructions listed on ManageEngine's website has inaccurate data (lists the wrong batch files to use, etc).

Very good for compliance

Komentarze: We had many cases with different departments who remove files or folder, who made changes in excel file. The software always gives the right answer, never disappointed me. If you are looking for a file server audit, you should just buy it.

Zalety:

File server auditing is the best so far, very easy to use. UI is well designed. Ad reporting is really helping us to find out who has an old session and locked account

Wady:

AD audit tool can be improved as far as event log wise. you have to run the software as service, don't forget that, The pricing is a little bit higher.

For AD auditing very useful

Zalety:

It has a lot of reports already on it. You can use report templates to create a report. For active directory but in same time you can use for auditing file servers. It has DNS auditing and Exchange users and groups too.

Wady:

Archiving model isn't very useful. It isn't easy to take something from archived logs.