Société de transport de Montréal enhances Active Directory reporting and compliance with ADAudit Plus

Business challenges

• Detailed Active Directory Reporting: STM needed comprehensive reports on various Active Directory objects like users, groups, contacts, organizational units, and computers. These reports were vital for their day-to-day operations and management.
• Efficient report distribution: The agency wanted these reports not only generated but also sent to specific stakeholders through e-mail or saved in a particular network location, streamlining the distribution and access process.
• Active Directory auditing: Gaining insights into user logons, failed logon attempts, and other critical Active Directory events was essential for STM. They needed a centralized console that provided this data effectively.
• Immediate vulnerability alerts: Being a public transport entity, STM holds a vast amount of critical data. Ensuring that their systems are devoid of vulnerabilities and getting timely alerts and patches is crucial to maintain their reputation and the security of their data.

The problem

STM recognized that while their main business requirement with ADAudit Plus was primarily focused on achieving detailed reports from the Active Directory, the depth of their challenges was much more profound. Raffa Mukoon Mohammed, Security Consultant at STM, emphasized, "We wanted reports on various AD objects sent to us either through email or saved in a specific network location."

The efficiency of their previous systems did not meet their current needs, mainly because their objectives demanded precision and a focus on security. Mohammed mentioned that while they acknowledged the multi-functionality of ADAudit Plus in areas such as password resets or bulk user creation, they primarily used it for its reporting capabilities.

On the side of ADAudit Plus, the challenge lay in its ability to offer insights into critical events in their Active Directory, particularly because security was paramount. The STM needed a tool that gave them the power to view user logons, failed attempts, and all logged events, which previously proved cumbersome.

The solution

With ADAudit Plus, the STM could efficiently generate and distribute comprehensive reports about their Active Directory. These reports met their objectives, and Mohammed added, "We are well satisfied that our objectives have been met, and we are getting all the reports."

ADAudit Plus proved itself as an indispensable tool for the organization. It provided a centralized console where all required information, from user logons to failed attempts, was easily accessible. "It helps us in terms of security," Mohammed stated. He further emphasized how ADAudit Plus aided both their security and access management teams, thanks to the plethora of information it offered.

Moreover, the STM found the products user-friendly, with Mohammed highlighting the ease of customizing reports to fit their needs. He also pointed out the training he provided to his security team, emphasizing the simplicity of the tools: "It was very easy."

Support from the ManageEngine team played a significant role in STM's success with the products. Mohammed appreciated the support, saying, "The support was always available for us for any troubleshooting or any configuration purposes." This collaborative approach ensured that challenges, such as the licensing issue they faced, could be promptly addressed.

In conclusion, ADAudit Plus have provided STM with tools that not only meet their business requirements but also offer potential for further exploration. Mohammed affirmed, "I would recommend these products to other organizations," while also suggesting proactive alerts regarding any product vulnerabilities.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.