ManageEngine ADAudit Plus

Over 250 built-in reports

Schedule and email reports

Collect Windows security event logs from domain controllers, servers and workstations

Archive and restore audit log data

Audit GPO creation, deletion, modification and link changes with before and after values (GPO settings audit is in the Professional edition)

Track permission and schema changes (Professional edition)

Audit Windows servers: local logon and logoff, file integrity, printers, removable storage, scheduled tasks and processes, PowerShell

Monitor AD replication status

Real-time change notification of who did what, when and from where in Windows Server and AD environments

Identify risky cloud configurations across Azure, GCP and AWS

Identify risky configurations on Windows servers and workstations

Auto-create tickets with event details in ServiceNow, Jira, ManageEngine ServiceDesk Plus, Freshservice, Zendesk or Kayako when an alert fires

Generate prepackaged compliance reports for SOX, HIPAA, PCI DSS, GDPR, FISMA, GLBA and ISO 27001

Schedule and email compliance reports

Attack surface analyzer detects 25+ AD attacks and risky Azure, AWS and GCP configurations

User behavior analytics flags deviations from normal user behavior

Send real-time email and SMS alerts from 50+ built-in AD alert profiles

Alert on 25+ named AD attacks such as Kerberoasting, DCSync and pass-the-hash

Audit changes, logons and access across AD, Entra ID, file servers, Windows servers and workstations (file server, Entra ID, server and workstation auditing are licensed add-ons)

Audit privileged user actions

Track logon activity, AD changes, administrative actions and file changes through compliance-specific reports and alerts for SOX, HIPAA, PCI DSS, GDPR, FISMA, GLBA and ISO 27001