70 percent of Windows Environments Are at Risk of Malicious Attacks

ManageEngine Releases Results of Global Active Directory and Windows Server Security - Trends and Practices Survey, 2016

  • IT admins report heightened interest in visibility: configurations, settings and standards
  • Access the ManageEngine survey results at

PLEASANTON, Calif - May 9, 2016 - ManageEngine, the real-time IT management company, today announced the results of the global ManageEngine Active Directory and Windows Server Security - Trends and Practices Survey, 2016. Among the critical findings is that 70 percent of IT administrators across the globe say that their Windows environments are at risk of malicious attacks.

Click to tweet this news.

Over the past few years, the success rate of attacks, both internal and external, on corporate networks has been growing. At the center of most corporate networks is Active Directory. Since Active Directory is the most important technology to control access to the network and resources, it is important to secure all aspects of this portion of a network.

However, the growing success rate of attacks suggests that many organizations do not secure Active Directory correctly. Recently, ManageEngine conducted a survey to better understand the common security practices followed by IT admins that specialize in Active Directory and Windows Server. The full survey and results from 327 practitioners is available at

"Organizations clearly are paying closer attention to the security for Active Directory," said Derek Melber, technical evangelist for ManageEngine and microsite manager of Security Hardening for Active Directory and Windows Servers. "However, the survey results also indicate that Windows environments are far from being secure, and improved overall visibility is essential."

Active Directory and Windows Server Security - Trends and Practices

Analysis of the survey results reveals key factors that influence security. It also outlines important suggestions for the year ahead regarding security of Windows environments. In turn, organizations can enhance security measures to ensure a more secure and smoother environment to run business operations. Insights into various aspects of Windows environment security include:

  • Awareness of and concern about internal attacks
  • Interest in a security solution with change notification alerts
  • Ease of accessing current Windows security settings
  • Knowledge of current Windows security standards
  • Frequency of using tools to generate security reports

Survey Highlights

  • 70 percent of respondents agree that their Windows environments are not completely secure from malicious attacks, while another 10 percent admit to being unaware of the security standards for Windows environments.
  • 72 percent of respondents seek a solution that sends alerts when security configurations change, yet 55 percent have not begun to use one.
  • 47 percent of IT admins find it difficult and time consuming to gain awareness of the current security settings of their Windows environments. A small percentage of respondents use scripts but find it tedious.

Inferences from the Survey Findings

  • The results clearly indicate that organizations need to take immediate action to secure their Windows environments.
  • The findings imply a visibility gap in the market. Despite the market availability of solution providers, at least half the organizations do not use a configuration alert system and may need to perform requirement-to-solution mapping to reduce this gap.
  • For efficient management of their Windows environments, IT admins could benefit from exploring available reporting solutions.

For more information about ManageEngine, please visit; follow the company blog at, on Facebook at and on Twitter @ManageEngine.

About ADSolutions

ADSolutions is a cluster of solutions that specialize in the management and reporting of Windows Server and Active Directory (AD). The AD Suite comprises five products that enable management and administration of Active Directory, auditing of AD, user password management, Exchange reporting and monitoring, and AD backup and recovery. These products provide comprehensive reports and administrative capabilities to authorized technicians to ensure constant monitoring of AD events. For more information about ADSolutions, please visit

About ManageEngine

ManageEngine delivers the real-time IT management tools that empower IT teams to meet organizational needs for real-time services and support. Worldwide, established and emerging enterprises - including more than 60 percent of the Fortune 500 - rely on ManageEngine products to ensure the optimal performance of their critical IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine is a division of Zoho Corporation with offices worldwide, including the United States, India, Singapore, Japan and China. For more information, please visit; follow the company blog at, on Facebook at and on Twitter @ManageEngine.

Media Contact:

Ahana Govinda
Follow us on Twitter: @manageengine