ManageEngine ADAudit Plus

IT and security teams get one console that shows who changed what across Active Directory, Entra ID, file servers, Windows servers and workstations, alerts on risky events and produces audit-ready compliance reports.

manageengine.com

Suggest a correction

Overview

Audits activity across Active Directory, Microsoft Entra ID, Windows file servers and NAS devices, Windows servers and workstations. It shows who made which change, when and from where, and sends instant email or SMS alerts for critical events such as file deletions or privileged group changes; alerts can also run scripts, raise tickets or disable accounts. More than 250 built-in reports, schedulable and deliverable by email, cover logons, lockouts, GPO and permission changes, file access and compliance mandates such as SOX, HIPAA, PCI DSS, GDPR, FISMA, GLBA and ISO 27001. User behavior analytics and an attack surface analyzer flag anomalies, 25+ Active Directory attacks and risky Azure, AWS and GCP configurations. Licensing is per server in Free, Standard and Professional editions plus add-ons; Professional adds GPO settings, permission, DNS and schema change auditing and old/new attribute values.
More product details

Product

Awards and recognitions
  • Name
    Gartner Peer Insights Customers' Choice
    Category
    Security Incident & Event Management (SIEM)
    Organizer
    Gartner
Documentation
manageengine.com/products/active-directory-audit/help
License Model
Proprietary
Solution Kind
Application

Who it is for

Industries
  • Healthcare
  • Financial services
  • Education
Organization Types
  • Business
  • Nonprofit
  • Education
Roles
  • Administrators
Use Cases
  • Report generation
  • Time tracking

Images

Features

IT Reporting

Over 250 built-in reports

Schedule and email reports

More details & conditions: IT Reporting

Custom report builder and filters

Categories: IT Management

Event Logs

Collect Windows security event logs from domain controllers, servers and workstations

Archive and restore audit log data

More details & conditions: Event Logs

Forward logs to Splunk, ArcSight and Syslog servers

Categories: IT Management

Configuration Management

Audit GPO creation, deletion, modification and link changes with before and after values (GPO settings audit is in the Professional edition)

Track permission and schema changes (Professional edition)

Categories: IT Management

Server Monitoring

Delivery method: Paid add-on

Audit Windows servers: local logon and logoff, file integrity, printers, removable storage, scheduled tasks and processes, PowerShell

Monitor AD replication status

Categories: IT Management

Real-Time Monitoring

Real-time change notification of who did what, when and from where in Windows Server and AD environments

Categories: IT Management

Risk Assessment

Identify risky cloud configurations across Azure, GCP and AWS

Identify risky configurations on Windows servers and workstations

Categories: Audit

Issue Management

Delivery method: Integration

Auto-create tickets with event details in ServiceNow, Jira, ManageEngine ServiceDesk Plus, Freshservice, Zendesk or Kayako when an alert fires

Categories: Audit

Compliance Management

Generate prepackaged compliance reports for SOX, HIPAA, PCI DSS, GDPR, FISMA, GLBA and ISO 27001

Schedule and email compliance reports

More details & conditions: Compliance Management

Compliance-specific alert activity reports showing which events were monitored and alerted

Categories: Audit

Risk Analysis

Attack surface analyzer detects 25+ AD attacks and risky Azure, AWS and GCP configurations

User behavior analytics flags deviations from normal user behavior

Categories: Audit

Risk Alerts

Send real-time email and SMS alerts from 50+ built-in AD alert profiles

Alert on 25+ named AD attacks such as Kerberoasting, DCSync and pass-the-hash

More details & conditions: Risk Alerts

Threshold-based and UBA alerts for anomalies such as spikes in file access

Run scripts on alert to disable an account, end a session or shut down a device

Categories: Audit

Security Auditing

Delivery method: Paid add-on

Audit changes, logons and access across AD, Entra ID, file servers, Windows servers and workstations (file server, Entra ID, server and workstation auditing are licensed add-ons)

Audit privileged user actions

More details & conditions: Security Auditing

File integrity monitoring on Windows systems

Keep an audit trail that includes failed activity such as logon failures

Categories: Audit

Compliance Tracking

Track logon activity, AD changes, administrative actions and file changes through compliance-specific reports and alerts for SOX, HIPAA, PCI DSS, GDPR, FISMA, GLBA and ISO 27001

Categories: Compliance

Show all details (17)

Audit Management

Keep a consolidated per-user audit trail including failed activity

Schedule and email audit reports

Categories: Compliance

Alerts/Escalation

Delivery method: Integration

Deliver alerts by email and SMS to defined stakeholders

Trigger scripted response actions on alert

More details & conditions: Alerts/Escalation

Auto-create tickets in external ITSM tools with full event context

Categories: Compliance

Monitoring

Monitor AD, file server, Windows server and workstation activity with real-time notifications

Monitor privileged user and remote desktop activity

Categories: Compliance

Archiving & Retention

Archive audit log data for as long as wanted and restore it as needed

Generate reports from archived data

Categories: Compliance

Incident Management

Delivery method: Integration

Raise tickets in external ITSM tools from alerts

Run scripts to disable accounts, disconnect sessions or shut down endpoints on alert

Categories: Compliance

Workflow details

Frameworks
  • Name
    SOX
  • Name
    HIPAA
  • Name
    PCI DSS
  • Name
    GDPR
  • Name
    FISMA
  • Name
    GLBA
  • Name
    ISO 27001

Categories: Audit · Compliance

Pricing

Common pricing conditions

Applies to: Standard · Professional

Add On Fees
  • Azure AD audit add-on, from 1 tenant, annual

    USD 995

  • Windows file servers add-on, from 2 servers, annual

    USD 495

  • NAS file servers add-on, from 1 server, annual

    USD 595

  • Windows servers add-on, from 5 servers, annual

    USD 345

  • Workstations add-on, from 100 workstations, annual

    USD 245

  • AD Backup and Recovery add-on, from 250 users, annual

    USD 195

  • File Analysis add-on, from 2 TB, annual

    USD 145

Trial Available
Yes
Trial Days
30
Trial is free
Yes

Free editionFree option

Plan details & limits

Business Model
  • Free
Limits
  • Audited workstations

    25workstations

    Conditions
    Free edition never expires; audits and collects data across 25 workstations and generates reports from the log data collected during evaluation.

Standard

USD 595 / flat fee / yearBilled annually

USD 595 / flat fee / year

Billed annually

Price Tiers
  • Unit
    Domain Controllers
    Unit price
    Amount
    595
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    2
  • Unit
    Domain Controllers
    Unit price
    Amount
    1,195
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    5
  • Unit
    Domain Controllers
    Unit price
    Amount
    2,145
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    10
  • Unit
    Domain Controllers
    Unit price
    Amount
    3,395
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    15
  • Unit
    Domain Controllers
    Unit price
    Amount
    4,395
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    20

Plan details & limits

Business Model
  • Subscription

Professional

USD 945 / flat fee / yearBilled annually

USD 945 / flat fee / year

Billed annually

Price Tiers
  • Unit
    Domain Controllers
    Unit price
    Amount
    945
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    2
  • Unit
    Domain Controllers
    Unit price
    Amount
    1,795
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    5
  • Unit
    Domain Controllers
    Unit price
    Amount
    3,495
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    10
  • Unit
    Domain Controllers
    Unit price
    Amount
    5,095
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    15
  • Unit
    Domain Controllers
    Unit price
    Amount
    6,595
    Currency
    USD
    Calculation
    Flat band
    Upper bound
    20

Plan details & limits

Business Model
  • Subscription

Technical details

Deployment

Client Channels
  • Browser
Delivery Models
  • On premises
Server OS
  • Platform
    Windows Server

Implementation

Delivery Mode
  • Self service
  • Vendor
Typical Duration
Unit
Minutes
Scope
From downloading the product to receiving predefined reports and alerts, without professional help
Maximum
30
Estimate kind
Vendor estimate

Customization

Supported Scopes
  • Reports

Support

Channels
  • Email
  • Phone
  • Chat
  • Community
  • Knowledge base
Training Formats
  • Documentation
  • Video
  • Webinar

Integrations

Jira

Direction
Outbound
Objects
  • Tickets raised automatically from critical Active Directory alert events
Publisher
ManageEngine
Sync Mode
  • Event driven

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with ManageEngine ADAudit Plus.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights