Netwrix auditor alternative | ManageEngine ADAudit Plus

Three of every five Fortune 500 companies trust us to manage their IT

Pay less and get more with ADAudit Plus.

Netwrix is licensed on a per-user basis, i.e., the more new users you add, the more it will cost you. This means that even without an increase in the number of data sources, your costs will likely increase each year. However, ADAudit Plus is licensed on a per-server basis, which ensures that you can ingest data from all sources, and still remain within your budget over the years.
Both ADAudit Plus and Netwrix offer Active Directory and file server auditing capabilities that are on-par. However, ADAudit Plus offers more comprehensive Windows server and workstation auditing. Check out the comparison table below for more information.

Feature	Description	Manage Engine ADAudit Plus	Netwrix Auditor
Logon auditing	Provides information on all Windows logon activity—from logon failures to logon history
Account lockout analysis	Notifies of a lockout and helps analyze the source of authentication failure
Object change audit	Provides information on changes to users, groups, OUs, GPOs (including Group Policy setting changes), and other AD objects
Privileged user monitoring	Provides information on actions carried out by administrators and other privileged users
Azure AD audit	Provides information on successful and failed user logons, and changes to Azure AD objects

Feature	Description	Manage Engine ADAudit Plus	Netwrix Auditor
File/folder access audit	Provides information on file/folder read, create, delete, and modify actions
File/folder permission change audit	Provides information on file/folder DACL and SACL changes
File/folder failed attempts audit	Provides information on failed attempts to read, write, and delete files/folders
Local file access audit	Provides information on changes to system, program, and other local files residing on computers
Supported environments	Windows, Windows failover cluster, NetApp, and EMC	+ Synology	+ Nutanix

Feature	Description	Manage Engine ADAudit Plus	Netwrix Auditor
Local logon and object change auditing	Provides information on local logon activity and changes to local accounts
AD Federation Service (AD FS) auditing	Provides information on both successful and failed AD FS logons
LAPS auditing	Provides information on who is viewing or modifying local admin credentials
User work hour tracking	Provides information on actual time spent by users at their workstation (excluding idle time)
PowerShell auditing	Provides information on PowerShell processes along with commands executed in them

Feature	Description	Manage Engine ADAudit Plus	Netwrix Auditor
Real-time alerts	Provides instant notification of security events via email/SMS. Allows configuration of triggers based on volume, time, user, etc.
User behavior analytics	Allows detection of abnormal user behavior based on users' previous activity patterns
Prepackaged reports	Provides complete user audit trail—who did what, when, and from where. Also, provides information on changed attribute values (before and after) of AD objects. Helps demonstrate compliance with SOX, HIPAA, PCI DSS, GLBA, GDPR, and other mandates
Long-term log retention	Allows long term retention of audit data
Architecture	Offers both agentless and agent-based audit data collection

Auditors and regulators frequently ask for reports that show Active Directory activities such as user lockouts, access removal for terminated users, users created, etc. AD Audit Plus has helped us do that easily and with minimal overhead.

Chris Schum
Information Security Officer
AD Audit has given us the ability to see who does what in our admin group thus giving the security office more efficiency and control over our domain.

Shawn W.
Deployment was very easy and very cost-effective. After we received our license, we immediately started deployment of software and was active in less then 1 hour.

Nikola Mugosa
This product allowed me to report on user login information and determine who made what changes to AD when necessary.

Steffenson, Shannon L
Network Systems Manager
Auditors and regulators frequently ask for reports that show Active Directory activities such as user lockouts, access removal for terminated users, users created, etc. AD Audit Plus has helped us do that easily and with minimal overhead.

Chris Schum
Information Security Officer
AD Audit has given us the ability to see who does what in our admin group thus giving the security office more efficiency and control over our domain.

Shawn W.

Disclaimer

The purpose of this comparison is to give the reader an idea about the Active Directory, Azure AD, file server, and member server auditing capabilities of ManageEngine ADAudit Plus and Netwrix Auditor. For auditing other platforms, please check ManageEngine Log360, an integrated SIEM solution that includes ADAudit Plus.
This comparison is based on the information available online as of February, 2020, and while much care has been taken to prepare this comparison, we give no warranties whatsoever, including but not limited to the accuracy of any information contained herein.