UHB NHS Foundation Trust adopts ADAudit Plus for efficient AD reporting and HR audits

Business challenges

• PowerShell dependency: Prior to implementing ADAudit Plus, UHB NHS relied on PowerShell scripts to monitor and report on Active Directory (AD) activities. This approach required significant manual effort, lacked real-time monitoring capabilities, and provided limited insights, making it difficult to track critical changes effectively.
• Limited visibility into AD activities: The hospital faced challenges in tracking changes to Group Policy Objects (GPOs), Organizational Units (OUs), and certificate deletions. These limitations hindered the HR team’s ability to verify user access and audit employee activities while adhering to internal policies and compliance requirements.

The problem

UHB NHS IT administrative team's reliance on PowerShell scripts for Active Directory monitoring proved inefficient and time-consuming. The manual nature of the process made it challenging to generate detailed and holistic reports, limiting the IT and HR teams’ ability to track critical AD changes. The lack of real-time monitoring capabilities and granular insights also left gaps in security and compliance enforcement. This inefficiency created a pressing need for a more robust, automated solution that could enhance visibility, accountability, and operational integrity.

The solution

UHB NHS adopted ADAudit Plus, ManageEngine's UBA-powered IT auditing solution, to address its Active Directory monitoring and auditing challenges. ADAudit Plus' centralized capabilities streamlined the hospital’s processes, offering real-time monitoring, detailed reporting, and actionable insights to support HR verification and IT compliance.

ADAudit Plus enabled the IT team to efficiently track critical AD activities, such as changes to Group Policy Objects (GPOs), logon activities, modifications to Organizational Units (OUs), and certificate deletions. These capabilities ensured the HR department could verify user access and audit employee activity with much-needed accuracy.

The solution’s granular reporting features significantly enhanced transparency and accountability across user activities. By delivering comprehensive insights into login events and changes within the Active Directory environment, ADAudit Plus empowered various teams at UHB NHS to maintain a secure, well-audited IT infrastructure.

The transition to ADAudit Plus replaced the shortcomings of PowerShell scripts with a user-friendly, automated solution that delivers actionable insights in the form of pre-packaged reports and analyses. This shift reduced manual effort, improved operational efficiency, and strengthened the hospital’s security posture.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.