Click here to expand

ADAudit Plus vs. Microsoft 365 (using PowerShell cmdlets)

ADAudit Plus	Microsoft 365
On-premises domain details
Displays both on-premises and cloud details, such as SID, GUID, and user distinguished name	Only displays details available in the cloud, such as user name and display name
Activity origin
Generates details on where the activity began, e.g., in the cloud or synced from Windows servers	Does not include details on where the activity began
Retention
Retains historical data based on the retention period configured by the user	Amount of data stored is based on the license level in Microsoft 365 (maximum retention duration is 90 days)
Reports
Lists user login details across both on-premises and cloud environments from a single console	Generates only cloud login details in reports

Table 3: A detailed comparison of how auditing via ADAudit Plus differs from auditing via Microsoft 365 over multiple categories.

On this page