R&O Construction enhances AD monitoring with ADAudit Plus

Business challenges

• Lack of monitoring capabilities: R&O Construction faced challenges with monitoring their network effectively. The absence of real-time network monitoring and the inability to implement custom scripts for this purpose left them vulnerable to potential security risks.
• Limited AD visibility: The company needed a solution that could provide visibility into AD changes and track user activity, including failed login attempts, after-hours logins, and user creation or deletion.

The problem

Before ADAudit Plus, R&O Construction struggled with real-time monitoring of their AD environment. Skylar Olsen, the IT director at R&O Construction, recounted that the lack of proper visibility into changes such as user creation, failed login attempts, and attribute modifications made it difficult to ensure the security of their network. Moreover, without the capability to implement real-time alerts and track network activity effectively, the organization were at a disadvantage when it came to identifying suspicious activity and ensuring compliance.

The solution

With ADAudit Plus, Olsen's IT team at R&O Construction gained full visibility into their AD environment. The solution real-time monitoring capabilities allowed them to set up email alerts for critical changes, such as attribute modifications and after-hours logins. The ability to receive instant notifications enabled the IT team to take immediate action on potential security threats. Additionally, the clear and easy-to-navigate reports provided important insights without requiring technicians to type complex scripts, with Olsen explaining, "[ADAudit Plus' reports] are effective and occur in real-time. I can glean information in a window quickly without having to know or understand PowerShell fully."

Although the company did not utilize all the user behavior analytics (UBA) features, ADAudit Plus’ focus on user creation, deletion, failed logons, and other key events proved to be a game-changer. The tool also provided better pricing than competitors, further solidifying its value for R&O Construction. Skylar summarized her experience with ADAudit Plus by saying "I think [ADAudit Plus] is a great product and has always been better priced than competitors which is why I stick with it."

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.