Standard Valuations Inc. boosts remote work productivity and AD visibility with ADAudit Plus

Business challenges

• Monitoring Unauthorized Account Changes: Standard Valuations needed a way to identify if unauthorized accounts were added to servers without relying on manual log analysis, which was both time-consuming and prone to oversight.
• Proof of System Security: The company wanted a reliable method to verify that systems were uncompromised, providing a definitive measure beyond the “gut feeling” assurance offered by existing security products.
• Efficient Report Management: Daily confirmation of AD integrity was a key task, and Standard Valuations sought an automated way to monitor this, eliminating the need for manual log reviews.

The problem

Before implementing ADAudit Plus, Standard Valuations faced significant challenges in monitoring unauthorized access to Active Directory (AD). Don Szurek, Information Security Officer at Standard Valuations, noted, "The biggest challenge was knowing if there were accounts being added to our servers." With no centralized way to track these changes, verifying the integrity of the AD required painstaking log reviews—a time-intensive and often inconsistent method that left room for error. Szurek also emphasized that while the existing security products provided some level of confidence, they needed a solution that could offer “proof that our systems are not compromised,” rather than a simple assumption based on software alerts.

Remote workforce monitoring also presented issues. Szurek shared a specific example where his IT team took significant time in determining an employee's last logon without a direct tracking system. The lack of easy access to accurate login data further underscored the need for a more capable solution.

The solution

Implementing ADAudit Plus brought substantial improvements to Standard Valuations's security and monitoring capabilities. The ability to automate daily AD reports allowed Szurek to confirm that no unauthorized changes were made, streamlining a process that previously required manual inspection. “Having a daily report that shows no changes to Active Directory lets me verify our system’s security quickly, without combing through logs,” he remarked. The tool also offered clear insights into user behavior, assisting in maintenance scheduling by identifying users’ regular working hours.

Moreover, ADAudit Plus enabled the Standard Valuations team to track unusual activities with ease, providing customizable alerts based on key events within the AD. The outcome was a more efficient, reliable, and streamlined auditing process that enhanced both operational efficiency and data security. Szurek highlighted the solution’s importance, stating, “This is a great solution because it allows me to know daily that no changes have been made without manually sifting through logs.” Additionally, Szurek appreciated the responsive support team, which helped resolve issues quickly, though he noted the potential for improved troubleshooting guidance.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.