Home > ManageEngine AD360 vs Microsoft Identity manager

Looking for an alternative to
Microsoft Identity manager

100000+ Technicians trust AD360 to manage their Windows environment

Try AD360

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

    Download fully functional
    60-days FREE trial!

  • By clicking 'Start a free trial', you agree to processing of personal data according to the Privacy Policy.

Thanks!

One of our solution experts will get in touch with you shortly

Comparing ManageEngine AD360 vs Microsoft Identity manager

  • The reality is simple: Active Directory forms the backbone of IT in any enterprise running on Windows, and managing such a crucial piece of technology requires a lot of manpower and time.
  • ManageEngine AD360 and Microsoft Identity Manager (MIM) are two software solutions that aim to reduce the cost and time associated with managing Active Directory. Both solutions offer IT admins powerful features to efficiently manage and secure Active Directory, and also synchronize identities with Azure and other cloud applications.
  • AD360 is easy to deploy and use. It provides a wide range of features to create, manage, and sync identities in the AD and the cloud. It can also be used to manage non-Microsoft applications such as G Suite.
  • MIM on the other hand is difficult to install and configure. Its main purpose is to synchronized identities between the on-premises AD and Azure AD. It doesn’t work seamlessly with nonWindows applications, and require a lot of time, scripting knowledge, etc., to setup and fully realize its potential.

What makes ManageEngine AD360 unique?

Active Directory, Office 365, Exchange Server, and G Suite management

  • AD360 supports bulk user provisioning in Active Directory and cross-platform provisioning that lets you provision users in AD, Office 365, Exchange Servers, G Suite, and others in one single click. You can also modify and deprovision users in bulk using a CSV file or custom templates.
  • MIM on the other hand doesn’t have these powerful management capabilities. Even for user provisioning, you need to know PowerShell knowledge, add plug-ins, and so on.

Active Directory, Office 365, and Exchange Auditing

  • AD360 has a powerful auditing component for Active Directory, Windows File Servers, Office 365, and Microsoft Exchange Servers. It has you covered when it comes to IT regulatory laws like SOX, HIPAA, PCI, FISMA, etc., with built-in compliance specific reports.
  • MIM on the other hand doesn’t have a strong auditing component.

Group, Computer & Contact Management

  • AD360 supports group, computer, and contact objects management in addition to user accounts management.

Mobile Apps

  • AD360 has dedicated apps for Android & iPhone for ‘on the go’ Active Directory management and self-service password management.
  • MIM has no mobile apps.

Arsenal of Reports

  • With over 200+ ‘out-of-the-box’ reports, AD360 0 has quite an arsenal of reports. You can also create your own custom reports with filters based on your requirements.
  • MIM has only a minimal amount of reports.

Multi-platform Password Management

  • AD360 support self-service password reset and synchronization n for Google Apps, Salesforce, Office 365, Zoho, IBM AS400, HP UX, Oracle Database and Oracle E-Business Suite with support for more applications and systems being added regularly.
  • MIM supports password reset and synchronization between on-premises AD and Azure AD only.

Single Sign-On for Cloud Apps

  • AD360 offers SSO for 80+ cloud apps with Active Directory identities. Users are automatically logged in to a large number of cloud applications using their Windows credentials.
  • MIM doesn’t directly support SSO for cloud applications.

Script-free

  • AD360 is completely GUI-based and doesn’t require any scripting knowledge. All tasks can be accomplished even by novice users
  • MIM on the other hand requires PowerShell scripts for some features to work.

Easier deployment

  • AD360 can be installed on a DC, member server, or even a workstation. You can install all the components of AD360, and be up and running in a matter of minutes.
  • MIM on the other hand can only be installed on a server and takes up a lot of time to install and configure

Affordable ‘Component-based’ Pricing Model

  • AD360 gives you complete freedom to choose the components you need and pay only for what you choose. As such, AD360 starts at $495 for unlimited users (AD Management component alone).
  • MIM could cost as much as $20,000 for an organization with 1500 users.

To know more about the differences between ManageEngine AD360 and MIM, please refer the following features comparison table.

Note: The comparison is based on readily available information on competitor’s website as on Sep 25, 2017. The data provided might vary in the actual product.

NA - In the comparison table, NA means we are unable to verify whether the feature is available in the competitor's product.

Active Directory, Exchange, Office 365, G Suite and other cloud applications

Features Description ManageEngine AD360
Try now
Microsoft Identity Manager
Management
Bulk User Provisioning Allows creation of user accounts in AD, Office 365, G Suite, Exchange, and more simultaneously with a single click.    

(Not supported for G Suite)

Bulk Password Resets Allows IT admins and help desk technicians to reset passwords and unlock accounts in bulk.    
Bulk Computer, Contact, Group, and GPO management Manage AD objects in bulk, including creation, deletion, and modification.    
Active Directory Delegation Delegate specific AD tasks to help desk personnel or HR staff without explicitly altering their permissions in AD.    
Active Directory Workflow Control the actions of help desk staff by defining workflow and approval rules.    
Active Directory Automation Automate routine AD management tasks.    

(Supported only for limited tasks)

Single Sign-On
SSO for cloud apps Provides secure, one-click access to cloud applications using Active Directory identities    
Reporting
Active Directory Objects Reports Reports on AD users, computers, groups, OUs, and GPOs.  

(150+ reports)

NA

(Data not available)

Active Directory Password Reports Reports on password status, security permissions, password expiration, invalid logon attempts, and password changes.   NA
Management from Reports Reset passwords directly from password reports, enable users from user reports, and more.    
Auditing
WHO, WHEN, WHERE and WHAT of AD changes Reports on who changed what, when and where in Active Directory.    
Logon/Logoff Audit Reports Exact time of user workstation logon & logoff time along with the logon duration.   NA
Compliance Ready Reports Pre-defined reports for SOX, HIPAA, PCI-DSS, GLBA and FISMA compliance.    
Before and After values of a Change Reports on before/after attribute values of an object.   NA
GPO Audit Reports Report on changes to group policy objects.   NA
Custom Reports Create your own custom reports or put up a request for one based on your requirements.   NA
History Reports Get reports on Active Directory from a particular period of time in the past.   NA
Report Customization Export, sort, and modify report columns as per your convenience.   NA
Scheduling of Reports Schedule Active Directory reports for automated delivery.   NA
User, Computer, Group, OU Management Audit Auditing of all important Active Directory objects.   NA

File Server

Features Description ManageEngine AD360
Try now
Microsoft Identity Manager
Management
NTFS Permissions Management Manage NTFS permissions for users in bulk.    
Windows Share Permissions Management Control user access and activity on shares.    
Auditing
File Integrity Monitoring Monitor changes to the Windows system, configuration, program files, file attributes and folder.    
Access Permission changes Reports on folder and file permission changes (DACL and SACL).    
Failover Clusters Audit and monitor the Windows File Server Failover cluster.    
Supported File Servers List of file servers supported for auditing. Windows Servers, NetApp Filers, EMC  
Additional Auditing Capabilities (applies to both AD and File Server Auditing)
Web Browser Access Accessibility from anywhere in the domain using a web-browser.    
Custom Alerts Schedule custom alerts of important events.    
Alert Profile Schedule alerts based on a certain threshold level or business hours.    
Archival Sustain compliance by archiving and storing audit data.    
Account lockout analyzer Analyze reasons behind domain account lockout.    
SIEM integration Integrate raw logs from into your onpremises Security Information and Event Management (SIEM) systems.    

On-premises Exchange Server

Features Description ManageEngine AD360
Try now
Microsoft Identity Manager
Reporting
Mailboxes Reports Reports on mailbox size, account status, content, permission, retention policies, storage information, and more.  

(40+ reports)

NA
OWA & ActiveSync Reports Provides valuable insights on OWA & ActiveSync usage and configuration details  

(15+ reports)

NA
Email Traffic Analyze Exchange Traffic by tracking the traffic to each mailbox.  

(50+ reports)

NA
Storage Reports Get complete insights into storage objects in your organization including mailbox database, public folders, and server storage.   NA
Distribution Lists and Public Folders Reports Provides complete insight into the distribution lists and public folders in your Exchange environment.   NA
Organization Reports Provides details of various objects in Exchange.   NA
Monitoring
Exchange Monitoring Monitoring of emails, mailboxes size, DAGs, databases, and servers.    
Auditing
Mailbox Permission Changes Shows details of changes made to mailbox permission settings.   NA
Mailbox Storage Quota Changes Shows changes to user mailbox storage quotas settings.   NA
Mailbox Properties Changes Shows details of changes made to mailbox properties.   NA
Mailbox Size Restriction Changes Shows details of changes made to mailbox size restriction.   NA
Exchange Database Changes Shows details of changes made to Exchange databases.   NA
Non-owner Mailbox Activities Shows non-owner activities on mailboxes.   NA
Owner Mailbox Activities Shows activities on mailboxes by owners.   NA
Admin Mailbox Activities Shows activities on mailboxes by Exchange admins.   NA
Mails Deleted or Moved Shows email moved or deleted by users.   NA
Compliance reports for Exchange Pre-defined reports for SOX, HIPAA, PCI-DSS, GLBA and FISMA compliance.   NA
Alerting
Alerts on Critical Activities Receive instant email notifications when critical events occur in your Exchange environment.    

Office 365

Features Description AD360
Try now
Microsoft Identity Manager
Mailbox Management Manage mailbox permissions, properties, audit settings, and more, in bulk (including shared mailbox and public folder).  

(50+ management tasks)

NA
Mailbox Reports Get details on mailbox users, inactive mailboxes, mailboxes size, account status, mailbox content, mail traffic, and more.  

(100+ reports)

NA
Mailbox auditing Shows details of activities performed by users and admins on mailboxes.   NA
Audit Profiles Create custom audit profiles to track specific events and actions.   NA
User Management Reset passwords, block/unblock users, delete/restore users, change attributes, configure MFA, and more, in bulk.   NA
Group Management Configure whether groups can accept mail from only internal senders or both internal and external senders in bulk.   NA
Contact Management Delete contacts and make changes to contact attributes in bulk.   NA
License Management Assign or remove licenses in bulk along with usage location.   NA
User Reports Get details on all users, account status, password status, logon details, and more.  

(20+ reports)

NA
Group Reports Identity all groups, group members, groups’ size, groups’ type, and more.  

(15+ reports)

NA
Contact Reports Get details on all contacts, inactive contacts, modified contacts, and more.   NA
License Reports Get details on licenses applied, licensed users, soon-to-expire licenses, and more   NA
Compliance Built-in reports for SOX, HIPAA, GLBA, PCI DSS, and more.    

Other Office 365 Services

Features Description AD360
Try now
Microsoft Identity Manager
OneDrive for Business Reporting and auditing Shows detailed reports and auditing on all activities in OneDrive for Business   NA
Skype for Business General Reports Reports on active users, blocked users, client devices, P2P sessions, conferences, PSTN usage, and more.  

(10 reports)

NA
Sway Activities Audit admin and user activities in Sway.   NA
Microsoft Teams Events Audit Track events such as channels added, teams created, teams deleted, and users signed in to Teams.   NA
Power BI auditing Helps you track all activities in Power BI   NA

Self-Service Capabilities

Features Description AD360
Try now
Netwrix
Password Reset / Account Unlock Users can reset their forgotten passwords and unlock their lockedout Windows accounts without calling helpdesk    

(only password reset is available)

Password Expiry Notification Notify users to change password before it expires via email  

(100% Free feature for unlimited users)

 
Multi-Platform Password Synchronizer Synchronize password and account changes across various platforms    
Employee Directory Update Employees can update their profile information in Active Directory    
Group Subscription Users can opt-in and opt-out of Secruity and Distribution Groups at their will based on policies set by administrator    
Change Password Users can change their password from anywhere, anytime    
Self-service certificate management Manage certificates using self-service model.    
Add-on features
Mobile Password Management Self-Service Password Reset and Account Unlock via Mobile Devices    
Client Software (GINA/Credential Provider) extension Password Reset/Account Unlock from Windows logon screen (CTRL+ALT+DEL)    
Identity Verification Methods Users identity are verified before they can reset their password or unlock their account RSA SeurID, Duo Security, RADISU Server, Security Q&A, SMS/Email based Pin code, and Google Authenticator NA
Client Software extension for Mac OS Password Reset/Account Unlock from Mac OS X logon screen    

Can the solution be considered value for money?

Component-based pricing model.
Starts at $595* per year
for identity management

* - self-service, SSO, auditing, and other components cost extra.

Conclusion

  • For businesses looking to cut cost on managing Active Directory, Office 365, and Exchange, ManageEngine AD360 offers a comprehensive solution that covers all the bases and much more.
  • Microsoft Identity Manager is overpriced and overcomplicated.
  • It can be clearly established from the feature comparison table, that ManageEngine AD360 is markedly a better solution than Microsoft Identity Manager.

customer-testimonial-logo

What customers say about us

  • CAMH will be able to save close to $26,000 a year on service desk calls related to Active Directory password resets and locked accounts, and will see a return on investment within the first six months of product implementation.

    Judy OlivierProject Manager, CAMH

About ManageEngine AD360

AD360 is an identity and access management (IAM) solution for managing user identities, governing access to resources, enforcing security, and ensuring compliance. AD360 provides all these functionalities for Windows Active Directory, Exchange Server, and O ce 365. With AD360, you can choose the modules you need and start addressing IAM challenges across on-premises, cloud, and hybrid environments—all from a single console.

For more information about AD360, please visit

www.manageengine.com/ad360.
Download
Demo

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

Download fully functional60-days FREE trial!

  •  
    By clicking 'Claim Your Free Trial', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine AD360. We have received your request for a personalized demo and will contact you shortly.

Schedule apersonalized web demo

  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Disclaimer: ManageEngine does not guarantee the accuracy of any information presented in this document, and there is no commitment, expressed or implied, on ManageEngine’s part to update or otherwise amend this document. The furnishing of this document does not provide any license to patents, trademarks, copyrights or other intellectual property rights owned or held by ManageEngine.