Skip to main content
ManageEngine ADAudit Plus

ManageEngine ADAudit Plus


What is ManageEngine ADAudit Plus?

ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.Achieve hybrid AD monitoring with…

Read more
Recent Reviews

ITSM is ManageEngine

9 out of 10
October 28, 2022
  1. logging of user, workstation and server activity.
  2. This is used to find out where accounts are locked and still logged in
  3. For audit purposes
  4. In…
Continue reading
Read all reviews


Products that are considered exceptional by their customers based on a variety of criteria win TrustRadius awards. Learn more about the types of TrustRadius awards to make the best purchase decision. More about TrustRadius Awards

Popular Features

View all 15 features
  • Data visualization (29)
  • Administrator access control (28)
  • Customizable reporting (32)
  • Automated alerts and notifications (29)

Reviewer Pros & Cons

View all pros & cons
Return to navigation


View all pricing



On Premise
per year



On Premise
per year

Entry-level set up fee?

  • No setup fee
For the latest information on pricing, visit…


  • Free Trial
  • Free/Freemium Version
  • Premium Consulting / Integration Services

Starting price (does not include set up fee)

  • $595 per year
Return to navigation


Monitoring Tasks

Various types of monitoring

Avg 8.8

Management Tasks

Various tasks required to keep systems running smoothly

Avg 8.3


Report generation to help with system monitoring tasks

Avg 8.2


Management of security aspects of system monitoring

Avg 7.3
Return to navigation

Product Details

What is ManageEngine ADAudit Plus?

ADAudit Plus offers real-time monitoring, user and entity behaviour analytics, and change audit reports that helps users keep AD and IT infrastructure secure and compliant.

  • Track all changes to Windows AD objects including users, groups, computers, GPOs, and OUs.
  • Achieve hybrid AD monitoring with a single, correlated view of all the activities happening across both on-premises AD and Azure AD.
  • Monitor every user's logon and logoff activity, including every successful and failed login attempt across network workstations.
  • Audit Windows file servers, failover clusters, NetApp, and EMC storage to document changes to files and folders.
  • Monitor system configurations, program files, and folder changes to ensure file integrity.
  • Track changes across Windows servers, printers, and USB devices with a summary of events.
  • Leverage advanced statistical analysis and machine learning techniques to detect anomalous behaviour and defend against cyber attacks.

ManageEngine ADAudit Plus Features

Monitoring Tasks Features

  • Supported: Remote monitoring
  • Supported: Network device monitoring
  • Supported: Multiple Server Monitoring
  • Supported: Multi-device monitoring
  • Supported: Automated alerts and notifications

Management Tasks Features

  • Supported: Service configuration management
  • Supported: Policy-based automation

Reporting Features

  • Supported: Performance data reports
  • Supported: Customizable reporting
  • Supported: Data visualization
  • Supported: Risk analysis

Security Features

  • Supported: Administrator access control

ManageEngine ADAudit Plus Screenshots

Screenshot of Active Directory AuditingScreenshot of Track Account LockoutsScreenshot of Logon MonitoringScreenshot of Audit User PrivilegesScreenshot of PCI - DSS Compliance

ManageEngine ADAudit Plus Video

Redinet's testimonial about ManageEngine ADAudit Plus

ManageEngine ADAudit Plus Technical Details

Deployment TypesOn-premise
Operating SystemsWindows
Mobile ApplicationApple iOS, Android, Windows Phone
Supported CountriesGlobal
Supported LanguagesEnglish

Frequently Asked Questions

ManageEngine ADAudit Plus starts at $595.

Netwrix Auditor, SolarWinds Access Rights Manager (ARM), and Splunk User Behavior Analytics (UBA) are common alternatives for ManageEngine ADAudit Plus.

Reviewers rate Multiple Server Monitoring highest, with a score of 9.7.

The most common users of ManageEngine ADAudit Plus are from Mid-sized Companies (51-1,000 employees).
Return to navigation


View all alternatives
Return to navigation

Reviews and Ratings


Attribute Ratings


(1-25 of 32)
Companies can't remove reviews or game the system. Here's why
Aaron Nielson | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We use ADAudit Plus to actively monitor our on-prem and Azure instances of Active Directory. We utilize the tool to provide alert and logging functions for multiple Active Directory user events as well as detect unexpected configuration changes to our Active Directory configuration. The tool also provides detailed account reports that can be utilized as evidence during an audit. The reports contain details such as who, what and when was changed for user, computer and groups as well as objects such as GPOs, etc. The tool also provides additional functionality such as analytic alerts and reports for anomalous user activity, file and server audits and FIM. We find this tool to be invaluable in monitoring the state of our Active Directory environment and it has helped us thwart intrusion events and malicious activity. This tool is invaluable for monitoring and auditing your Active Directory environment and it is available at a very competitive price.
  • Activity reporting
  • Alerting on anomalies and unexpected events
  • Ease of deployment and configuration
  • Excellent end user support
  • Custom alerts can be difficult to write/configure
  • Would like to see more complex alerting for common AD attacks such as Kerberosting, etc.
This audit solution is appropriate for both small and large institutions. It can provide excellent audit reports that are easily obtained and provide clear details of the who, what, when. There are other solutions that are a bit more robust when it comes to detecting and alerting on malicious activity but for the cost and customizable options, ADAudit Plus is hard to beat. I have successfully used this product to detect and thwart intrusion events. If configured correctly, it can provide robust detection and alerting capabilities.
Score 9 out of 10
Vetted Review
Verified User
We use ADAudit plus to keep tabs on everything that is happening in AD. Predefined and custom alerts allow for very granular alerting based on the things that matter most to you. Alerts happen in real-time for admin-related and other high-profile tasks that are happening in AD. There is also historical data that can be used for trending or troubleshooting. Reports can be generated for a large number of events. We also use this for file server auditing to see what users deleted, modified, moved, etc. files or folders.
  • Alerting on relevant events.
  • Report generation for specific scenarios.
  • Logging of meaningful data.
  • Correlation/Anomalous Activity checks.
  • In earlier releases there were quite a few bugs and performance issues. These have since been resolved.
  • When integrated with the Log360 Suite, it can be confusing on whether EventLog Analyzer or ADAudit Plus are "managing"/"Ingesting" the data from a given endpoint.
If you are using an Active Directory environment, this tool will complement any existing UEBA/SIEM type tools you have in place.
May 02, 2023

AD Audit Plus

Score 10 out of 10
Vetted Review
Verified User
We used it to audit our Active Directory as part of our Cyber Security compliance. This solution made it easier for us to grab the reports needed on a daily basis. Also once we implemented our Azure AD this will be a great add-on for that deployment.
  • Logon Failures
  • User activity
  • User Management
  • Integration with other solution of ManageEngine without SSL
  • Better UI
  • Can we get detailed activity of users
With ADAudit it just makes it easier to manage Active Directory, the visibility of all reports you can generate in just a matter of a click...try doing that from powershell.
Score 9 out of 10
Vetted Review
Verified User
We use it to audit the system (changes) and the techs who are in charge of doing accounts, moving accounts, creating computers. etc.
Gives us a deeper dive into the stuff that happens in AD w/out us realizing. We utilize this tool a lot!
  • Logging
  • Features available
  • Interface and layout
  • Multiple domain access
  • Server integration
  • simplify notifications
  • some feature seem clunky
Well suited in any Active Directory environment. It helps us in a bunch of different ways but most notably the actual auditing of our environment. It hits the WHO? When? Where? for us. Who made the change, when they made the change and of course where they made the change. Being able to go back over a year is also very helpful.

If you're not in an AD environment, the software is obviously not helpful but if you are...don't miss out. Implementation is a breeze, the software works great. Support is consistent. Not the best, but definitely not the worst.
Score 9 out of 10
Vetted Review
Verified User
ManageEngine ADAudit plus has become an integral part of my day to day operations, it's used heavily on assisting our service desk team and the business as a whole with simple yet complex tasks such as unknown account lock outs, Reports of user activity i.e. logon and logoff reports, scheduling of reports, folder permission statuses. This has become a much needed tool in the technology arena.
  • Reporting
  • File Audits
  • Summary view of activity
  • User activity report - for some users no data is generated
  • Scheduling reporting - don't always generate the report when times are set
During the pandemic after being instructed to work from home, it became a bit challenging for departments to track employee activity, the business approached IT for a solution which we quickly constructed using ManageEngine ADAudit reports "Logon Logoff activity" this provided the business with some clarity on attendance and absences.
Zwier Dijkhuis | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We are managing a large group of users and groups in multiple domains with our dedicated IT support group that consists of 5 domain admins and 35 power users. We also have a user provisioning application in-place that controls user creation and group addition/removal.
The enduser lead can manage groups for their employees using the provisioning application, all changes are audited in this application. For all the other changes that are made outside the tool we use AD Audit logging, but that is hard to manage because securitylogs ar fastly overwritten (even with high capacity log settings) and most of the time it is hard to find the specific changes you need.
Since we use ADAuditplus all these problems are gone and besides that we saw that ADauditplus had more capabilities that helped us to prefend looking in audit logs, because we now have the ability to set alerts for specific changes that we did not want to happen. For example the "password never expires" option, we dont want that to be set for any user. In ADAuditPlus I created a rule that send me and IT management an email that shows us who and when that specific change was made. We are very happy with ADauditplus, it helps us to maintain the high level security in our environment.

  • ManageEngine ADAudit Plus changes for user and group management can be looked up in builtin reports
  • You can build your own reports based on almost every logic you can think of
  • You have the ability to create alerts based on logic and filters and sendout custom alerts to email, SMS or other means.
  • First you need to understand the basics of the software, after that the software itself is very helpfull in configuring specific items.
  • I really love the support that ManageEngine is giving the customer, for all questions I use the chat on their website. This is for me the best remote support I ever saw, and I saw a lot in my 20 years of experience in IT.
  • The archive function can use some more work. When I search for data and the data is found in the archive I can push a button to retrieve it, but there is no notification when the data is fully loaded again.
  • Searching for specific data in reports it could be helpful to have a drop list of common failures when using the advanced filter option.
  • Besides the default alerts dashboard it would be nice to create your own alerts dashboards. That way I could give other people there own alerts dashboard with the alerts that are helpfull for them only.
In my opinion this is the best software for managing and controlling changes in Active Directory. Besides that it comes default with lots of very handy built in reports and alerts. And if you need more, just create one yourself. Suitable for any size of company that leans on daily changes in Active Directory and want to maintain their security at a high level.
October 28, 2022

Good for the price

Score 9 out of 10
Vetted Review
Verified User
As a public company we need to be able to provide evidence of changes and ADAudit has save us many hours of searching for ways to provide this. From an operational point of view being able to search and find who, when, and what changed again saves man hours when trying to figure out instances where there is a mistake or question about why a persons access was changed.
  • Tracking changes to passwords.
  • Tracking user access changes via security groups.
  • Tracking group policy changes.
  • Event driven alerting
  • Customizable dashboard
  • Smoother upgrade process. Sometime easy, sometimes clunky
Audit trails for help desk related updates to accounts. Audit tails for SysAdmin related changes to AD architecture and policy
Score 10 out of 10
Vetted Review
Verified User
As a member of senior staff, it is critical to monitor changes made in our environment. These changes can be intentional and have adverse effects, so we need to know why they were done. It is easy to see how a change cause a problem or resolved an issue but the changer must be tracked and accountable for these items
  • Track changes to rights
  • track changes to policies
  • check for locked out accounts
  • report again usage
  • It would be great to feed data from ADAudit Plus to ad manager and use that for changes
  • It would be great to have an sql like language to report against the data
  • It would be great to store the data 100% in the cloud
If you need basic easy to use monitoring of your director solution on ADS or AADP then this is a great tool.

I have yet to find a solution where it is not appropriate for us. The cost is right for the output so value is big.
October 28, 2022

ITSM is ManageEngine

Score 9 out of 10
Vetted Review
Verified User
  1. logging of user, workstation and server activity.
  2. This is used to find out where accounts are locked and still logged in
  3. For audit purposes
  4. Investigations
  5. access control monitoring
  • Logging of File activity by user
  • provide detail information about user, workstation and server activity
  • Scheduled reporting
  • Training in products
  • Consultancy how to best implement products in company
Suited: We use ManageEngine ADAudit Plus to collect logon and login on workstation for audit purposes. therefore, we can show records how we comply with the regulations of the governing body. When users delete files and everybody denies doing it, ADAudit Plus assist us in this investigation. With this information we use to take precautions. When data is moved and nobody knows where it is, ADAudit Plus is used to locate the user initiating the move and the location where the data is moved to. Product could not be used to identify data growth on the server and who has led to increase of data saved on server.
Score 9 out of 10
Vetted Review
Verified User
We use AdAudit to centrally repository all Active Directory events. And do monthly and quarterly reporting on user interactions, permission changes, account creations, and deletions. And for helping find where people get locked out. Great tool for AD reporting all around!
  • AD reporting.
  • Live user account event research and review.
  • network drive access permission changes.
  • some of the reports have bugs and have been long-standing issues not resolved for years.
  • web portal has not really changed in look & feel in years.
  • not always the easiest to customize reports.
Active Directory environments work very well. For workgroups, it won't always work the best. Pricing is very scalable for an organization of any size and growth pattern to do reporting and AD analysis.
October 27, 2022

Quick and Easy

Scott Ashenden | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
We mainly use this for compliance reporting and to provide evidence for our ISO and financial audits. There are a plethora of reports to chose many of which would take us time to write scripts to pill the data but its all there are a click of a button. We also use this to report of file storage usages and has been essential when auditing file movement, deletetion etc
  • File audits
  • Active Directory Audits
  • Reports
  • Better integration with Azure AD
  • Better Sharepoint Logging
This is a great product for auditing your Active Directory, we run monthly reports for our auditors to demonstrate that we know all users created, movements and removal.
Where multipe administraors are available in Active Directory this is useful to be able to easily display actions in Active Directory, and show any changes made to Group Policies, User Groups amonst other things.
It is not so great at intergrating in with Azure AD as it is on premise but it has improved.
Score 10 out of 10
Vetted Review
Verified User
We use it to manage the active directories. It brings powerful tools that others don't have, and it's in an extremely intuitive interface. The reports are great, and it already has all the reporting we need without using our time creating them. It's easy to create and manage custom active directory attributes, which we use on a regular basis. We also use the user delegation tools; we have given HR access so they can also make employee changes.
  • Management Delegation.
  • Reporting
  • Intuitive interface.
  • honestly, i don't know where it could improve. it has everything we need.
If you have an active directory in your business with more than just a handful of employees, you'll want ADAudit Plus. It's great for managing AD. Suppose you are in a heavily regulated field like Financial Services or Healthcare, then you will need it. The management, plus the reporting, will help you tremendously.
Daniel Paniagua | TrustRadius Reviewer
Score 9 out of 10
Vetted Review
Verified User
We use Audit plus for the administration and management of our active directory. We handle all reports and incidents.
  • Reporting
  • Logs
  • Alerts
  • Assets Inventory.
For auditing domain logs, users and activities. Less appropriate costs.
Score 8 out of 10
Vetted Review
Verified User
We use AD Audit to manage all avenues of Active Directory. Monitoring of AD user's creation, change and deletes Monitoring of Admin accounts Monitoring of specific confidential file changes Monitoring of thresholds of changed files Monitoring of who deleted, changed, or moved files These are the basic functions we use, but there are many more that are in use.
  • File change auditing.
  • Reports on anomalies that happen with users or files.
  • Printer usage results.
  • User lockout auditing.
  • Better detailed logging for AD Account Bad Passwords.
When a file is deleted, it is easy to search for who deleted it. The reports on who did what and when are very helpful and also help in the security/ransomware area. Years ago, there was ransomware that started changing files. An alert was triggered, and we were able to stop it immediately.
Score 6 out of 10
Vetted Review
Verified User
We use EndpointCentral, LOG360, and OpManager.
  • Wide range of products.
  • Instant Support.
  • Applications are very clunky and fall over often.
  • I don't feel QA is performed correctly or sufficiently.
  • Make all products more reliable and sturdier.
A small organization with 100-150 or so people. The bigger it gets, the more unreliable it becomes. Cost-wise, it's a good starting point for management and security auditing, but not a long-term reliable product range.
Score 9 out of 10
Vetted Review
Verified User
We needed a tooll that we could use to monitor logging on, use of privileged accounts and troubleshoot used/locked out accounts. This met all of our expectations and is incredibly easy to use and comes in at a great price. The instant alerting, monitoring of multiple servers and reporting is great and offers an incredible insight to our environment as well as showing us things we didn't know before e.g. old accounts still in use, bad passwords etc. If any user is having issues with their account that we're not able to diagnose we can jump onto ADAudit plus and see where their account is being used and at what point it gets locked out or where the issues are caused. We've also used it to monitor group policy changes and implementations. Highly recommend it, we probably only use it for 5% of what it's capable of but it's easy to manage for a small team and also helps us with monitoring the environment overall. We liked it so much that we ended up implementing a few more ManageEngine products (ServiceDesk Plus, Desktop Central to name a few). I can't see us moving away from it - It does all we want and more for a great price and usability.
  • Monitoring of accounts.
  • Alerting for account use.
  • Troubleshooting Group Policy.
  • Easier customisation for instant reporting e.g. more templates.
It's well suited for monitoring accounts and instant alerting of the use of privileged accounts/service accounts. We've used it to troubleshoot issues in the environment related to group policy changes.
Score 10 out of 10
Vetted Review
Verified User
Being an entity with more than 4,000 employees, having control of what happens internally was a priority. With the audit we were able to correct errors in applications that logged in to different servers, user accounts that were no longer used, inherited permissions in folders, among others. It also made it easier for us to comply with the required regulations, as well as having information online for use in a matter of seconds.
  • Variety of reports for immediate use once configured
  • Easy to go from a report to an alarm, allowing you to be proactive
  • Access from any web site to application
  • Clarity in the reports obtained with each license type
  • Integration with other SIEM tools
Good: Quickly attack ransomware problems, thanks to alarms when massively renaming files on a fileserver. excellent also for the prevention (intentional or accidental) of file deleted. Aditional, with AI, it allows us to be able to correct brute force attacks on domain accounts in time.
Not Good: Control and/or audit for workstations. is limited to the audit of few events
Score 10 out of 10
Vetted Review
Verified User
ManageEngine ADAudit Plus gives me great visibility into what changes have been made to the AD object. It is a very good auditing tool and even our IT auditor gives it a thumbs up. It has helped me many times on finding what has been changed and who made the change to the AD objects.
  • visibility on who made what change
  • what changes on the GPO
  • visibility on login failure
  • nothing i can think of, it has all the features more than i need
when i got asked to investigate who change the title of particular employee , i know ManageEngine ADAudit Plus can tell me the answer. when someone made a mistake, like put the staff into the wrong group, i know what was it before and how to roll back.
Reed Mattadeen | TrustRadius Reviewer
Score 10 out of 10
Vetted Review
Verified User
We primarily use ManageEngine ADAudit Plus for our RDS environment, as the majority of our users log in to our Terminal Servers.
We retain the logs for all user login and log-off activities and are able to pull reports for various requests.
Additionally, we apply it to our AD environment to keep track of all changes that are made to our objects. This is very beneficial to us as we do have several Domain Admins with various access levels and need to be able to manage changes that are being made within our domain.

As mentioned, we tend to receive requests from time to time inquiring about user logon/logoff activities, especially with the new hybrid work approach. The reports from ManageEngine ADAudit Plus are amazing and very clean for us to provide to department heads to allow them to measure employees' attendance and their overall productivity levels.
  • Logons - reports are very clean and concise and accurate
  • Account Lockouts - very challenging to do without ManageEngine ADAudit Plus. The tool allows us to easily locate the device or, at the very least, point us in the right direction!
  • AD change management - IT admins should consider this a necessity, and ManageEngine ADAudit Plus facilitates this seamlessly
  • Version updates - I'm not sure if this is available as I have not seen any option, but it would be nice if we could be notified when there is an update via email.
I think all IT Teams will benefit from ManageEngine ADAudit Plus. However, I believe MSPs would appreciate the solution the most since it would increase their accountability and minimize risk on their end and improve CRM overall.
Score 9 out of 10
Vetted Review
Verified User
I use ManageEngine ADAudit Plus daily to monitor and track logins and view login failures. I also use it to monitor changes throughout the network. The best part about the product is that changes can be tracked and documented with beautiful reports that can be handed to upper management and look professional.

The problem that the product addresses is that logs are not easily viewed in a single pane of glass. Usually, multiple programs and interfaces have to be leveraged to view different types of information. The logs that this product pulls show them all within the same system and are easily found and displayed.

The alerting feature is another great part of this product. There are many predefined alerts that can be tweaked to your liking. New alerts can be created and set with whichever parameters you wish.
  • Alerting
  • Reporting
  • Tracking
  • Automatic updates
  • Information regarding a report not showing data
ManageEngine ADAudit Plus is well suited for a company that wants to be able to track all aspects of its infrastructure. The reports are nice to keep or hand to management. Also, the other output options are nice to have to modify and use in another product if needed.
Score 10 out of 10
Vetted Review
Verified User
We use ManageEngine ADAudit Plus to monitor and log all changes to the active directory environment, as well as modifications to certain network share folders for file modification/creation/deletion. There are strict regulations that we adhere to as a company, and this has allowed us to maintain auditing logs and provide evidence during audits where applicable.
  • Audit logging of Active Directory
  • Monitoring file structures for modifications
  • Better investigation for locked out user accounts
ManageEngine ADAudit Plus is well suited for all the purposes we had intended to use it. It allows for auditing of our active directory, and user accounts as well as any changes to GPOs or AD security groups.
Score 9 out of 10
Vetted Review
Verified User
Currently using the product to comply with security regulations in place within the state of the organization. The product is lightweight, does not give any trouble running on the current servers, is easy to manage, easy to process reports, and support is always helpful when needed. Best of all, the product checks all the requirements set forth to comply with the regulation.
  • Audit Trail.
  • User Auditing.
  • Easy to Read Reports.
  • Customizable Reports.
  • Strictly on-Prem version without internet connection needed.
  • Pinpoint a file that a user opens only, currently, if a user opens a folder, it logs as the user opened/tried deleting all files.
  • Offline help wiki as help feature is internet faced.
As our organization needs to be complying with the strict regulation in place, the Manage Engine ADAudit Plus is suited for the organization to comply with the requirement. Pulling up a report to see a history usually takes a couple of minutes, always updating with fresh new events and verifying if the users are using the files within their means.
Score 9 out of 10
Vetted Review
Verified User
We use ManageEngine ADAudit Plus for all things AD. We use the reporting features daily! I have relied on ADAudit+ to help me manage our AD for 10+ years. I have called many times for support, and it has always been great. The support reps have always been friendly and fixed every issue.
  • Reporting
  • Management
  • Auditing of AD.
  • Help Desk for Password Reset/Unlock.
  • Some of the email warnings etc. could use some updates mainly for aesthetics.
  • Updates - I have had issues with manual updates a few times.
  • I would like to see a few more fields in the user creation area.
It is well suited for reporting on all things AD. It works well for delegating the Helpdesk features for password resets etc.
Score 10 out of 10
Vetted Review
Verified User
To quickly review/investigate changes made to user accounts, groups, computers, and NetApp directories. Get immediate alerts upon changes to critical accounts, etc. Investigate account and password lockout issues. Export required reports in pdf or excel format.
  • Dashboard for Top Logon failures and recent critical alerts.
  • Monitor file server/shares for changes and alerting for critical shares.
  • Monitor critical group changes and alerting.
  • Reporting at granular level in different formats.
  • Alert profile setup with regular expressions.
Helps investigate logs much more quickly Archive logs for longer retention as most of the Active Directory logs get overridden really quickly Helps get alerts for critical changes in real-time Helps with reporting needs Provides dashboard.
Score 10 out of 10
Vetted Review
Verified User
AD Audit plus lets our IT staff track changes and alerts to AD activities. Security events and change management are easily tracked, recorded, and reported.
  • Detects new users, privileged users.
  • Detects failed and successful login attempts.
  • Detects new computers added to domain.
  • Detects Group Policy Changes.
  • Integration with Azure could be better documented.
  • More analytics for compliance templates.
  • More flexible custom reports.
Tech support is quick to provide assistance with custom reports or configurations.
Return to navigation