ManageEngine monitors Active Directory

12 February 2019

Technology review
Hybrid Cloud

By Anthony Van den bossche, technical consultant, Realdolmen

 Prevention is better than cure. Knowing what activities are going on in your company network places you in a stronger position. Even more, it allows you to quickly detect cyber criminals, or even better, stay a step ahead of them. For this, Realdolmen relies on ManageEngine ADAudit Plus, says Anthony Van den bossche, Technical Consultant.

Cyber crime? Surely that's a problem for big companies, something you read about in the papers. Not so. Although many companies do still believe this. They are mistaken; cyber criminals do not discriminate. Anyone is a potential target. And even those aware of the threat can find it difficult to determine if there's actually anything going on.

Most companies must admit they don't really have much of a clue about what is happening on their own network. Who logged in? When did that happen and on which systems? Who deleted or moved a file? The answers to these questions aren't all that easy to find.

Proactive approach

In principle, you could log every single movement on the network, combine the logs and analyze them. But that is definitely not easy to do. In addition, you cannot be certain it will make you any the wiser. To put it another way: if a cybercriminal manages to figure out the login details of an employee and uses them to freely access the company network, plenty of companies will have no idea whatsoever that anything is up...

But as the saying goes: the question is not so much if you will ever have a problem like this, the question is when will it happen. Therefore, we prefer to be proactive at Realdolmen. Over the past period, we have built up considerable expertise concerning ManageEngine ADAudit Plus, an application that audits your active directory (AD) in real time.

Nothing gets past it

Using ManageEngine ADAudit Plus, first of all you have an audit trail available. You can instantly see where logins came from, who has changed their password, which logins failed, and so on. In addition, you also have a clear overview of the wider context. Who has changed which permissions, when this was done, have GPO settings been amended, have files been deleted or moved, and so on. ManageEngine ADAudit Plus monitors all AD objects: users, groups, GPOs, computers, OUs, DNS, changes to the AD schema, the AD configuration and so on. Auditing is of course not enough on its own. Based on an assessment, our Hybrid Cloud team seeks out potential vulnerabilities and makes recommendations to eliminate these.

In addition, ManageEngine allows you to control your rights management in a very focused way. For example, you can assign specific rights to help desk employees. They can be authorized to reset passwords for certain employee profiles, but not for directors, for example. And once again: ManageEngine stores an audit trail of every action.

Easy to restore

What is more, ManageEngine also offers added value in the area of data protection. Now and again, someone may accidentally delete an account. Recreating the account can often be a difficult job, costing time and loss of productivity for the affected user until the issue has been resolved. No longer, with ManageEngine RecoveryManager. This solution takes snapshots of the active directory and makes sure it is easy for you to recover the deleted account.

At Realdolmen we are always looking for applications that can deliver real added value for our customers. As part of our AD audit we have reviewed a large number of applications with a fine-toothed comb. We found everything we wanted in terms of functionality in ManageEngine ADAudit Plus. In addition, the tool comes with an attractive price model. You do not pay per user – as is normally the case – but per domain controller. That means you can easily obtain very good value for money.

Interested ?

Do you wish more info on ManageEngine AD Audit Plus or are you interested in an assessment? Mail to info@realdolmen.com. You can also download the recording of our Wiki Webinar "ManageEngine: the one-stop solution to Active Directory Management and Reporting" to get a quick view on what ManageEngine can mean for you.

ManageEngine:

The one-stop solution to Active Directory Management and Reporting

Subscribe for our monthly Wiki Feed!

Would you like to receive the latest news and updates in the field of hardware & licenses?

Register here