Phone Live Chat
US: +1 888 720 9500
US: +1 800 443 6694
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9393


Home >ManageEngine ADManager Plus vs vs Avecto Defendpoint

Looking for an alternative to
Avecto Defendpoint

100000+ Technicians trust ManageEngine ADManager Plus to manage their Windows environment

Try ManageEngine ADManager Plus

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

    Download fully functional
    30-days FREE trial!

  • By clicking 'Start a free trial', you agree to processing of personal data according to the Privacy Policy.


One of our solution experts will get in touch with you shortly


ManageEngine ADManager Plus and Avecto Defendpoint have both been designed and developed to help IT administrators and technicians, by enabling them to knock off their day-to-day tasks easily and quickly with minimal effort in order to maximize their productivity. Though their objective is the same, they both focus on two different areas.

While ManageEngine ADManager Plus eases the pain in managing and reporting on Windows Active Directory, Avecto Defendpoint simplifies endpoint security management. Since both these solutions serve vastly different purposes, comparing them is out of the question. So, instead of comparing their features, this document highlights the strengths and features of ADManager Plus and Defendpoint, to help you make an informed decision about which solution to choose for your specific needs.


ManageEngine ADManager Plus ADManager Plus is a web-based Active Directory (AD) and Exchange management and reporting tool which offers the ability to granularly delegate management and reporting tasks to help desk technicians, configure review-approval workflow and automate AD tasks. It also offers native mobile apps for on-the-go AD user management. Furthermore, it has added functionalities to provision user accounts in the cloud-based Office 365, manage their licenses, report on the Office 365 environment, as well as provision user accounts in Google Apps. Skype for Business / Lync management and reporting features are also available.
  • Web-based, single-console management and reporting of AD, MS Exchange (2003, 2007, 2010, 2013), Office 365, Skype for Business / Lync and Google Apps User Provisioning.
  • Single and bulk management of AD users, computers, OUs, groups, contacts; also offers customizable templates for provisioning and modifying AD objects.
  • Automation of AD tasks and a series of follow-up tasks for complete automation of critical routines/processes such as Identity and Access Management (IAM), AD Clean-up, etc.
  • Secure delegation of role / OU-based AD tasks to help desk technicians as well as business users like HRs; role-based profiles, and audit reports for each help desk technician.
  • Customizable multi-level workflow (request, review, approve, execute) to streamline and control the execution of AD tasks; configurable assignment and notification rules to auto-assign tasks and update task status to stake holders.
  • 150+ pre-built reports on important AD objects like users, groups, computers, contacts, GPOs, OUs; Exchange Distribution Lists, features; Office 365, and even compliance-specific reports that can be auto-generated and emailed to multiple users; allows execution of management actions (reset password, enable, disable, move, delete accounts) right from the reports.
  • The file server management feature empowers administrators to manage (assign / modify / revoke) users' NTFS and share permissions in bulk.
  • The security management feature enables creation and delegation of security roles, such as, resetting passwords, unlocking accounts, etc. for granting (or revoking) permissions to security principals. It also provides you the ability to search the permissions granted to security principals.
  • Offers dashboard for a snapshot about major AD objects; has in-built AD Search and Employee Search options.
  • 'On-the-move AD user management from mobile devices via native iOS and Android apps.
Avecto Defendpoint (previously: Privilege Guard) Avecto Defendpoint is an endpoint security software which combines privilege management, application control and sandboxing. It helps prevent unnecessary granting of admin rights to users and compromising security, by enabling users to logon to the desired applications using their standard user accounts. It also allows execution of control on applications by configuring policies that whitelist or blacklist them. The sandboxing module isolates untrusted web activity and places it into a secure container, capturing web-borne threats. Defendpoint is tightly integrated with either Microsoft Active Directory Group Policy or McAfee ePolicy Orchestrator (ePO), making it scalable across any size of organization.
  • Enable an application to run with elevated rights in a simple way. Define the application and set its identification options, such as filename, hash, publisher, etc., and thereafter assign the application to the users and computers who require elevated rights over it.
  • Privilege monitoring will analyze application behavior and log events for any application that would fail to run under a standard user account. Suitable policies may then be defined to elevate individual applications, enabling users to be removed from the local administrators group.
  • Designated user authorization allows the delegation of 'over-the-shoulder decisions to sysadmins, providing a flexible, audited, policy controlled alternative to Windows 'Run As.
  • On demand elevation facility allows certain users to logon with a standard user account and elevate applications from a shell context menu. All elevated applications are audited.
  • For application control, policies may be configured which whitelist the trusted applications on a system. Any unauthorized applications, software installers, and scripts, may be blocked and audited. The end user is presented with an option to submit a request for a blocked application.
  • Apply granular filters on each policy based on any combination of user, group, computer, time restriction, expiry time, or WMI Query. Using policy filters, you can rapidly deploy privilege settings to where they are needed, from company wide policies to individual role based needs.
  • Its sandboxing module protects private and corporate data by isolating untrusted web-based activity. All untrusted activity runs inside a secure container so that any potential threats are contained.
  • Its auditing and reporting facilities record all privileged activity and offer a number of options to review and report on the data, from the built-in reporting console to optional Enterprise Reporting Packs for Microsoft SQL Server and McAfee ePO.
  • Any number of end user messages may be defined, to be displayed before an application is blocked or launched, with multi-lingual support and full customization.

Can the solution be considered value for money?

Component-based pricing model
The Standard edition starts at $ 595


ManageEngine ADManager Plus and Avecto Defendpoint serve different purposes. While ADManager Plus focuses on making Active Directory management simple and efficient, through its built-in features and purely UI based actions, Defendpoint aims to simplify the endpoint security management .The only area where that these two applications overlap is the management of user permissions; but they do it in totally different ways. Based on the need, you can pick either or both of the solutions


What customers say about us

  • CAMH will be able to save close to $26,000 a year on service desk calls related to Active Directory password resets and locked accounts, and will see a return on investment within the first six months of product implementation.

    Judy OlivierProject Manager, CAMH

About ManageEngine ADManager Plus

ManageEngine ADManager Plus is a web-based Windows AD management and reporting solution that helps AD administrators and help desk technicians accomplish their day-to-day activities. With an intuitive,easy-to-use interface, ADManager Plus handles a variety of complex tasks and generates an exhaustive list of AD reports, some of which are essential requirements to satisfy compliance audits. It also helps administrators manage and report on their Exchange Server, Office 365, and Google Apps environments, in addition to AD, all from a single console.

For more information about ADManager Plus, visit
Get quote

Thank you for downloading!

Your download should begin automatically in 15 seconds. If not, click here to download manually.

Download fully functional30-days FREE trial!

    By clicking 'Claim Your Free Trial', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine ADManager Plus. We have received your request for a price quote and will contact you shortly.

Get a personalized Quote,that best suits your requirements

  • Add-ons

    Active Directory Backup and Recovery
    Back up and restore AD objects like users, computers, contacts, groups, OUs, GPOs, and dynamic distribution groups.Licenses are based on the number of users only. No restrictions on other AD objects such as groups, contacts, etc.
    Number of AD User Objects
  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Thank you

Thank you for your interest in ManageEngine ADManager Plus. We have received your request for a personalized demo and will contact you shortly.

Schedule apersonalized web demo

  • By clicking 'Submit', you agree to processing of personal data according to the Privacy Policy.

Disclaimer: ManageEngine does not guarantee the accuracy of any information presented in this document, and there is no commitment, expressed or implied, on ManageEngine's part to update or otherwise amend this document. The furnishing of this document does not provide any license to patents, trademarks, copyrights or other intellectual property rights owned or held by ManageEngine.